Lucene search
Veracode Vulnerability DatabaseVERACODE:36016HistoryJun 16, 2022 - 8:11 a.m.
OS Command Injection
2022-06-1608:11:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
0.001 Low
EPSS
Percentile
48.7%
Apache NiFi and Apache NiFi Registry are vulnerable to os command injection. The vulnerability exists because the ShellUserGroupProvider doesn’t properly neutralizes group resolution command elements which allows an attacker to inject and execute arbitrary OS commands on Linux and MacOS platforms.
Related
nvd
nvd
CVE-2022-33140
2022-06-15 15:15:08
cve
cve
CVE-2022-33140
2022-06-15 15:15:08
cvelist
cvelist
github
github
Code injection in Apache NiFi and NiFi Registry
2022-06-16 00:00:26
osv
osv
CVE-2022-33140
2022-06-15 15:15:08
Code injection in Apache NiFi and NiFi Registry
2022-06-16 00:00:26
prion
prion
Command injection
2022-06-15 15:15:00