CVE-2023-34468 (nifi) | allinfosecnews.com

June 12, 2023, 4:15 p.m. |

National Vulnerability Database web.nvd.nist.gov

The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authenticated and authorized user to configure a Database URL with the H2 driver that enables custom code execution.

The resolution validates the Database URL and rejects H2 JDBC locations.

You are recommended to upgrade to version 1.22.0 or later which fixes this issue.

apache code code execution cve database driver fixes issue jdbc nifi resolution services upgrade url version version 1

More from web.nvd.nist.gov / National Vulnerability Database

CVE-2023-45955 (lightstrip_firmware) 6 months, 1 week ago | web.nvd.nist.gov

attackers cve denial of service issue +1

CVE-2023-40101 (android) 6 months, 1 week ago | web.nvd.nist.gov

android check collapse cve +7

CVE-2023-21377 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bypass cve disclosure +8

CVE-2023-21380 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bluetooth buffer buffer overflow +9

CVE-2023-21382 (android) 6 months, 1 week ago | web.nvd.nist.gov

access android check cve +11

CVE-2023-21381 (android) 6 months, 1 week ago | web.nvd.nist.gov

android arbitrary code code code execution +10

CVE-2023-21385 (android) 6 months, 1 week ago | web.nvd.nist.gov

android corruption cve disclosure +7

CVE-2023-21387 (android) 6 months, 1 week ago | web.nvd.nist.gov

android backup bypass cve +11

CVE-2023-21389 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bypass check cve +10

Embedded VSOC Analyst

@ Sibylline Ltd | Australia, Australia

View on infosec-jobs.com

Cloud Security Platform Engineer

@ Google | London, UK; United Kingdom

View on infosec-jobs.com

Senior Associate Cybersecurity GRC - FedRAMP

@ Workday | USA, VA, McLean

View on infosec-jobs.com

Senior Incident Response Consultant, Mandiant, Google Cloud

@ Google | Mexico; Colombia

View on infosec-jobs.com

Cyber Software Engineering, Advisor

@ Peraton | Fort Gordon, GA, United States

View on infosec-jobs.com

Cloud Security Architect (Federal)

@ Moveworks | Remote, USA

View on infosec-jobs.com