VulnerabilityModified

CVE-2023-34468

HIGH 8.8EPSS 61.9%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 61.9%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authenticated and authorized user to configure a Database URL with the H2 driver that enables custom code execution. The resolution validates the Database URL and rejects H2 JDBC locations. You are recommended to upgrade to version 1.22.0 or later which fixes this issue.

CVSS 3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 61.87% probability · 99th percentile
CISA KEV: Not listed
Weakness: CWE-94
Affected: apache/nifi
Source: security@apache.org

References

http://packetstormsecurity.com/files/174398/Apache-NiFi-H2-Connection-String-Remote-Code-Execution.htmlThird Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2023/06/12/3Mailing List, Third Party Advisory
https://lists.apache.org/thread/7b82l4f5blmpkfcynf3y6z4x1vqo59h8Mailing List, Vendor Advisory
https://nifi.apache.org/security.html#CVE-2023-34468Release Notes, Vendor Advisory
https://www.cyfirma.com/outofband/apache-nifi-cve-2023-34468-rce-vulnerability-analysis-and-exploitation/Third Party Advisory
http://packetstormsecurity.com/files/174398/Apache-NiFi-H2-Connection-String-Remote-Code-Execution.htmlThird Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2023/06/12/3Mailing List, Third Party Advisory
https://lists.apache.org/thread/7b82l4f5blmpkfcynf3y6z4x1vqo59h8Mailing List, Vendor Advisory
https://nifi.apache.org/security.html#CVE-2023-34468Release Notes, Vendor Advisory
https://www.cyfirma.com/outofband/apache-nifi-cve-2023-34468-rce-vulnerability-analysis-and-exploitation/Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.