Nifi Registry (Apache) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2022-06-15. Vendor: Apache.

CVEs of Nifi Registry

• CVE-2022-33140 - CVSS 8.8 (high), 2022-06-15: The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group…
• CVE-2020-9482 - CVSS 6.5 (medium), 2020-04-28: If NiFi Registry 0.1.0 to 0.5.0 uses an authentication mechanism other than PKI, when the user clicks Log Out, NiFi Registry invalidates the authentication…