{"action":"Upgrade org.apache.nifi:nifi to 0.7.2 (0.x) or 1.1.2 (1.x) or later.","affected":[{"fixed":"0.7.2","introduced":"0"},{"fixed":"1.1.2","introduced":"1.0.0"}],"component":"org.apache.nifi:nifi","cve_ids":["CVE-2017-5636"],"ecosystem":"Maven","epss":0.03599,"exploited":false,"fixed_versions":["0.7.2","1.1.2"],"ghsa_id":"GHSA-jrcc-7jf5-3pxg","id":"tcs_01M5N93JPKCJFVKQX5C0BS9AVK","modified_at":"2023-11-08T03:59:22.184834Z","published_at":"2022-05-17T00:26:04Z","references":["https://osv.dev/vulnerability/GHSA-jrcc-7jf5-3pxg","https://nvd.nist.gov/vuln/detail/CVE-2017-5636","https://nifi.apache.org/security.html#CVE-2017-5636","http://www.securityfocus.com/bid/96731"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-jrcc-7jf5-3pxg","url":"https://osv.dev/vulnerability/GHSA-jrcc-7jf5-3pxg"}],"summary":"Injection in Apache NiFi"}