https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T18:23:10.708746+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-06240 bdu:2023-06240 2026-10-18T18:23:10.712825+00:00 bdu:2023-06240 https://cve.radiocsirt.org/vuln/bit-nifi-2023-34468 BIT-nifi-2023-34468 — Apache NiFi: Potential Code Injection with Database Services using H2 2026-10-18T18:23:10.712856+00:00

Affected: Bitnami: nifi

The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authenticated and authorized user to configure a Database URL with the H2 driver that enables custom code execution.

The resolution validates the Database URL and rejects H2 JDBC locations.

You are recommended to upgrade to version 1.22.0 or later which fixes this issue.

 https://cve.radiocsirt.org/vuln/euvd-2026-216559 EUVD-2026-216559 2026-10-18T18:23:10.712889+00:00 EUVD-2026-216559 https://cve.radiocsirt.org/vuln/fkie_cve-2023-34468 fkie_cve-2023-34468 2026-10-18T18:23:10.712903+00:00

The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authenticated and authorized user to configure a Database URL with the H2 driver that enables custom code execution.

The resolution validates the Database URL and rejects H2 JDBC locations.

You are recommended to upgrade to version 1.22.0 or later which fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-xm2m-2q6h-22jw GHSA-xm2m-2q6h-22jw — Apache NiFi vulnerable to Code Injection 2026-10-18T18:23:10.712926+00:00

Affected: Maven: org.apache.nifi:nifi-dbcp-base, Maven: org.apache.nifi:nifi-hikari-dbcp-service, Maven: org.apache.nifi:nifi-dbcp-service-nar

The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authenticated and authorized user to configure a Database URL with the H2 driver that enables custom code execution.

The resolution validates the Database URL and rejects H2 JDBC locations.

You are recommended to upgrade to version 1.22.0 or later which fixes this issue.

 https://cve.radiocsirt.org/vuln/gsd-2023-34468 gsd-2023-34468 2026-10-18T18:23:10.712952+00:00 gsd-2023-34468 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1423 WID-SEC-W-2023-1423 — Apache Nifi: Mehrere Schwachstellen 2026-10-18T18:23:10.712964+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Nifi ausnutzen, um beliebigen Programmcode auszuführen und weitere, nicht spezifizierte Auswirkungen zu erzielen.