org.apache.nifi:nifi-web-security@1.11.2 vulnerabilities
-
latest version
1.25.0
-
latest non vulnerable version
-
first published
9 years ago
-
latest version published
2 months ago
-
licenses detected
- [0.0.1-incubating,2.0.0-M2)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.apache.nifi:nifi-web-security package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
org.apache.nifi:nifi-web-security is a system to process and distribute data. Affected versions of this package are vulnerable to Denial of Service (DoS). The NiFi download token (one-time password) mechanism used a fixed cache size and did not authenticate a request to create a download token, only when attempting to use the token to access the content. An unauthenticated user could repeatedly request download tokens, preventing legitimate users from requesting download tokens. How to fix Denial of Service (DoS)? Upgrade |
[1.0.0,1.12.0)
|