Advisories · Technology
Apache Software Foundation Apache NiFi.
Every CVE that names Apache Software Foundation Apache NiFi among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Apache NiFi: Improper Handling of Case Sensitivity for Content-Encoding in HTTP Requests
- Apache Software Foundation Apache NiFi
- CWE-409
- CVSS 0.5 Low
Apache NiFi: Missing Authorization for Assets and Secrets Referenced by Connector Configuration
- Apache Software Foundation Apache NiFi
- Broken access control
- CVSS 5.9 Medium
Apache NiFi: Missing Authorization for Components Referenced in Flow Update Methods
- Apache Software Foundation Apache NiFi
- Broken access control
- CVSS 2.3 Low
Apache NiFi: Missing Process Group Authorization for Connector Migration
- Apache Software Foundation Apache NiFi
- Broken access control
- CVSS 8.8 High
Apache NiFi: Uncontrolled Resource Consumption through Decompression of HTTP Requests
- Apache Software Foundation Apache NiFi
- CWE-409
- CVSS 2.3 Low
Apache NiFi: Authorization Bypass for Parameter Context Asset Deletion
- Apache Software Foundation Apache NiFi
- Broken access control
- CVSS 7.7 High
Apache NiFi: Incorrect Authorization for Parameter Context Validation Requests
- Apache Software Foundation Apache NiFi
- Broken access control
- CVSS 5.9 Medium
Apache NiFi: Missing Authorization for Components Referenced by Parameter Context Updates
- Apache Software Foundation Apache NiFi
- Broken access control