Non notée
CVE-2017-12632 A malicious host header in an incoming HTTP request could cause NiFi to load resources from an external server
Description
A malicious host header in an incoming HTTP request could cause NiFi to load resources from an external server. The fix to sanitize host headers and compare to a controlled whitelist was applied on the Apache NiFi 1.5.0 release. Users running a prior 1.x release should upgrade to the appropriate release.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache NiFi | Versions non publiées |
Autres CVE de Apache NiFi
Les 47 CVE de Apache NiFi →
CVE-2026-70469
Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and rejected requests…
Non notée
CVE-2026-81866
Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API methods that do not…
0.5
Faible
CVE-2026-82561
Apache NiFi 1.5.0 through 2.11.0 provide REST API methods that replace the entire contents of a Process Group using a…
5.9
Moyenne
CVE-2026-86089
Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Process Group into a Connector using REST API…
2.3
Faible