{"action":"Upgrade org.apache.nifi:nifi-framework-core to 1.28.1 (1.x) or 2.0.0 (2.x) or later.","affected":[{"fixed":"1.28.1","introduced":"1.16.0"},{"fixed":"2.0.0","introduced":"2.0.0-M1"}],"component":"org.apache.nifi:nifi-framework-core","cve_ids":["CVE-2024-52067"],"ecosystem":"Maven","epss":0.00733,"exploited":false,"fixed_versions":["1.28.1","2.0.0"],"ghsa_id":"GHSA-v3vc-6qcv-4vrx","id":"tcs_01M5N9D43MVNRSP1RQYQPSFQ8G","modified_at":"2025-02-11T20:42:22.110416Z","published_at":"2025-02-11T18:31:20Z","references":["https://osv.dev/vulnerability/GHSA-v3vc-6qcv-4vrx","https://nvd.nist.gov/vuln/detail/CVE-2024-52067","https://github.com/apache/nifi/commit/5aed878c5d2a193cd2039c2e997bc3025046bc41","https://github.com/apache/nifi/commit/c1108365949268631526d5016b1a163a82f8e9df","https://github.com/apache/nifi","https://issues.apache.org/jira/browse/NIFI-13971","https://lists.apache.org/thread/9rz5rwn2zc7pfjq7ppqldqlc067tlcwd","http://www.openwall.com/lists/oss-security/2024/11/20/2"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-v3vc-6qcv-4vrx","url":"https://osv.dev/vulnerability/GHSA-v3vc-6qcv-4vrx"}],"summary":"Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log"}