https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 15:19:14 +0000 https://cve.radiocsirt.org/vuln/bit-nifi-2023-34212 <p><strong>Affected:</strong> Bitnami: nifi</p> <p>The JndiJmsConnectionFactoryProvider Controller Service, along with the ConsumeJMS and PublishJMS Processors, in Apache NiFi 1.8.0 through 1.21.0 allow an authenticated and authorized user to configure URL and library properties that enable deserialization of untrusted data from a remote location.</p> <p>The resolution validates the JNDI URL and restricts locations to a set of allowed schemes.</p> <p>You are recommended to upgrade to version 1.22.0 or later which fixes this issue.</p> <p><strong>Affected:</strong> Bitnami: nifi</p> <p>The JndiJmsConnectionFactoryProvider Controller Service, along with the ConsumeJMS and PublishJMS Processors, in Apache NiFi 1.8.0 through 1.21.0 allow an authenticated and authorized user to configure URL and library properties that enable deserialization of untrusted data from a remote location.</p> <p>The resolution validates the JNDI URL and restricts locations to a set of allowed schemes.</p> <p>You are recommended to upgrade to version 1.22.0 or later which fixes this issue.</p> https://cve.radiocsirt.org/vuln/bit-nifi-2023-34212 https://cve.radiocsirt.org/vuln/euvd-2026-216538 EUVD-2026-216538 https://cve.radiocsirt.org/vuln/euvd-2026-216538 https://cve.radiocsirt.org/vuln/fkie_cve-2023-34212 <p>The JndiJmsConnectionFactoryProvider Controller Service, along with the ConsumeJMS and PublishJMS Processors, in Apache NiFi 1.8.0 through 1.21.0 allow an authenticated and authorized user to configure URL and library properties that enable deserialization of untrusted data from a remote location.</p> <p>The resolution validates the JNDI URL and restricts locations to a set of allowed schemes.</p> <p>You are recommended to upgrade to version 1.22.0 or later which fixes this issue.</p> <p>The JndiJmsConnectionFactoryProvider Controller Service, along with the ConsumeJMS and PublishJMS Processors, in Apache NiFi 1.8.0 through 1.21.0 allow an authenticated and authorized user to configure URL and library properties that enable deserialization of untrusted data from a remote location.</p> <p>The resolution validates the JNDI URL and restricts locations to a set of allowed schemes.</p> <p>You are recommended to upgrade to version 1.22.0 or later which fixes this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-34212 https://cve.radiocsirt.org/vuln/ghsa-65wh-g8x8-gm2h <p><strong>Affected:</strong> Maven: org.apache.nifi:nifi-jms-processors</p> <p>The JndiJmsConnectionFactoryProvider Controller Service, along with the ConsumeJMS and PublishJMS Processors, in Apache NiFi 1.8.0 through 1.21.0 allow an authenticated and authorized user to configure URL and library properties that enable deserialization of untrusted data from a remote location.</p> <p>The resolution validates the JNDI URL and restricts locations to a set of allowed schemes.</p> <p>You are recommended to upgrade to version 1.22.0 or later which fixes this issue.</p> <p><strong>Affected:</strong> Maven: org.apache.nifi:nifi-jms-processors</p> <p>The JndiJmsConnectionFactoryProvider Controller Service, along with the ConsumeJMS and PublishJMS Processors, in Apache NiFi 1.8.0 through 1.21.0 allow an authenticated and authorized user to configure URL and library properties that enable deserialization of untrusted data from a remote location.</p> <p>The resolution validates the JNDI URL and restricts locations to a set of allowed schemes.</p> <p>You are recommended to upgrade to version 1.22.0 or later which fixes this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-65wh-g8x8-gm2h https://cve.radiocsirt.org/vuln/gsd-2023-34212 gsd-2023-34212 https://cve.radiocsirt.org/vuln/gsd-2023-34212 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1423 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Nifi ausnutzen, um beliebigen Programmcode auszuführen und weitere, nicht spezifizierte Auswirkungen zu erzielen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Nifi ausnutzen, um beliebigen Programmcode auszuführen und weitere, nicht spezifizierte Auswirkungen zu erzielen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1423