PT-2023-5586 · Apache · Apache Nifi

Mal + 1 · Publicado 2023-06-12 · Atualizado 2025-09-12 · CVE-2023-34468

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apache NiFi versions 0.0.2 through 1.21.0

Description The issue in Apache NiFi is related to the DBCPConnectionPool and HikariCPConnectionPool Controller Services, which allow an authenticated and authorized user to configure a Database URL with the H2 driver, enabling custom code execution. This can be exploited by a remote attacker to execute arbitrary code. Thousands of organizations are impacted by this issue. The resolution involves validating the Database URL and rejecting H2 JDBC locations.

Recommendations For Apache NiFi versions 0.0.2 through 1.21.0, upgrade to version 1.22.0 or later, which fixes this issue. As a temporary workaround, consider restricting the use of the H2 driver in the Database URL configuration to minimize the risk of exploitation.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

BDU:2023-06240

BIT-NIFI-2023-34468

CVE-2023-34468

GHSA-XM2M-2Q6H-22JW

Produtos afetados

Apache Nifi

Referências · 28

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_nifi_h2_rce.rb · Exploit
• 🔥 https://github.com/mbadanoiu/CVE-2023-34468 · Exploit
• 🔥 https://github.com/Al3xx-sec/CVE-2023-34468-POC · Exploit
• https://github.com/apache/nifi · Nota
• https://github.com/apache/nifi/pull/7349 · Nota
• https://github.com/apache/nifi/commit/4faf3ea59895e7e153db3f8f61147ff70a254361 · Nota
• https://twitter.com/BlackByte_/status/1707729490061750582 · Publicação no Twitter
• https://osv.dev/vulnerability/GHSA-xm2m-2q6h-22jw · Aviso do Fabricante
• https://t.me/cvenotify/58931 · Publicação no Telegram
• https://twitter.com/exceptionfactry/status/1710656736384729309 · Publicação no Twitter
• https://exceptionfactory.com/posts/2023/10/07/firsthand-analysis-of-apache-nifi-vulnerability-cve-2023-34468 · Nota
• https://cyfirma.com/outofband/apache-nifi-cve-2023-34468-rce-vulnerability-analysis-and-exploitation · Nota
• https://lists.apache.org/thread/7b82l4f5blmpkfcynf3y6z4x1vqo59h8 · Aviso do Fabricante
• https://t.me/cvenotify/52153 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-34468 · Nota de Segurança