CVE-2023-34468

high-risk
Published 2023-06-12

The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authenticated and authorized user to configure a Database URL with the H2 driver that enables custom code execution. The resolution validates the Database URL and rejects H2 JDBC locations. You are recommended to upgrade to version 1.22.0 or later which fixes this issue.

Do I need to act?

!
77.2% chance of exploitation in next 30 days
EPSS score — higher than 23% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.8/10 High
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Apache

References (10)

Third Party Advisory http://packetstormsecurity.com/files/174398/Apache-NiFi-H2-Connection-String-Rem...
Mailing List http://www.openwall.com/lists/oss-security/2023/06/12/3
Mailing List https://lists.apache.org/thread/7b82l4f5blmpkfcynf3y6z4x1vqo59h8
Release Notes https://nifi.apache.org/security.html#CVE-2023-34468
Third Party Advisory https://www.cyfirma.com/outofband/apache-nifi-cve-2023-34468-rce-vulnerability-a...
Third Party Advisory http://packetstormsecurity.com/files/174398/Apache-NiFi-H2-Connection-String-Rem...
Mailing List http://www.openwall.com/lists/oss-security/2023/06/12/3
Mailing List https://lists.apache.org/thread/7b82l4f5blmpkfcynf3y6z4x1vqo59h8
Release Notes https://nifi.apache.org/security.html#CVE-2023-34468
Third Party Advisory https://www.cyfirma.com/outofband/apache-nifi-cve-2023-34468-rce-vulnerability-a...
55
/ 100
high-risk
Severity 30/34 · Critical
Exploitability 20/34 · Moderate
Exposure 5/34 · Minimal