Maven/org.apache.nifi:nifi-standard-processors CVE-2023-36542: high 8.8, EPSS 1.90%
Apache NiFi Code Injection vulnerability
Action: Upgrade org.apache.nifi:nifi-standard-processors to 1.23.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.2 | 1.23.0 | - |
Fixed versions
| 1.23.0 |
Sources
- osv: GHSA-r969-8v3h-23v9#Maven/org.apache.nifi:nifi-standard-processors
- https://nvd.nist.gov/vuln/detail/CVE-2023-36542
- https://github.com/apache/nifi/commit/532578799c
- https://github.com/apache/nifi
- https://issues.apache.org/jira/browse/NIFI-11744
- https://lists.apache.org/thread/swnly3dzhhq9zo3rofc8djq77stkhbof
- https://nifi.apache.org/security.html#CVE-2023-36542
- http://seclists.org/fulldisclosure/2023/Jul/43
- http://www.openwall.com/lists/oss-security/2023/07/29/1
CVE-2023-36542 · published · modified · JSON