CVE-2017-12632

2018-01-2322:29:00

Google

osv.dev

0.002 Low

EPSS

Percentile

58.8%

JSON

A malicious host header in an incoming HTTP request could cause NiFi to load resources from an external server. The fix to sanitize host headers and compare to a controlled whitelist was applied on the Apache NiFi 1.5.0 release. Users running a prior 1.x release should upgrade to the appropriate release.

CPENameOperatorVersion
nifieqnifi-0.1.0-incubating-rc13
nifieqdocker/nifi-1.2.0
nifieqnifi-nar-maven-plugin-1.0.0-incubating-RC3
nifieqnifi-0.0.1-incubating-RC3
nifieqnifi-1.2.0-RC2
nifieqnifi-1.1.0-RC2
nifieqnifi-0.4.0
nifieqrel/nifi-1.0.0
nifieqnifi-0.6.0
nifieqnifi-0.2.0-incubating-RC1

Name	Operator	Version
nifi	eq	nifi-0.1.0-incubating-rc13
nifi	eq	docker/nifi-1.2.0
nifi	eq	nifi-nar-maven-plugin-1.0.0-incubating-RC3
nifi	eq	nifi-0.0.1-incubating-RC3
nifi	eq	nifi-1.2.0-RC2
nifi	eq	nifi-1.1.0-RC2
nifi	eq	nifi-0.4.0
nifi	eq	rel/nifi-1.0.0
nifi	eq	nifi-0.6.0
nifi	eq	nifi-0.2.0-incubating-RC1

Rows per page:

1-10 of 271

References

nifi.apache.org/security.html#CVE-2017-12632

0.002 Low

EPSS

Percentile

58.8%

JSON

Related for OSV:CVE-2017-12632