{"action":"Upgrade org.apache.nifi:nifi-security-utils to 1.12.0-RC1 or later.","affected":[{"fixed":"1.12.0-RC1","introduced":"0.0.1"}],"component":"org.apache.nifi:nifi-security-utils","cve_ids":["CVE-2020-1942"],"ecosystem":"Maven","epss":0.03124,"exploited":false,"fixed_versions":["1.12.0-RC1"],"ghsa_id":"GHSA-7q8g-gpfp-v8gx","id":"tcs_01M5N8JXMJ4FJN791T4JBKBDT6","modified_at":"2025-09-15T07:42:06.368030Z","published_at":"2022-01-06T20:40:58Z","references":["https://osv.dev/vulnerability/GHSA-7q8g-gpfp-v8gx","https://nvd.nist.gov/vuln/detail/CVE-2020-1942","https://github.com/apache/nifi/pull/4028","https://github.com/apache/nifi/commit/95746d346cddbd6134c4b28fdc39d5813a626f97","https://github.com/apache/nifi/commit/d7c29f46378379fb596e4d1e59d1a3c41063db5b","https://issues.apache.org/jira/browse/NIFI-7079","https://nifi.apache.org/security.html#CVE-2020-1942"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7q8g-gpfp-v8gx#Maven/org.apache.nifi:nifi-security-utils","url":"https://osv.dev/vulnerability/GHSA-7q8g-gpfp-v8gx"}],"summary":"Insertion of Sensitive Information into Log File in Apache NiFi"}