vulnti.work

Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated with Parameter Contexts through the REST API. The framework authorizes asset deletion against the owning Par…

提示
CVECVE-2026-68980
首次发现2026-08-03 23:15 UTC
披露时间2026-08-03 20:17 UTC
最后更新2026-08-03 23:15 UTC
通道状态auto

摘要

Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated with Parameter Contexts through the REST API. The framework authorizes asset deletion against the owning Parameter Context using the supplied Parameter Context Identifier and Asset Identifier. The framework performed authorized based on the supplied Parameter Context Identifier without verifying the requested Identifier against the stored Identifier. Apache NiFi installations that do not implement differe…

中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。

深度研判 · 自动通道

该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。

数据来源

  • NVD DATABASE

原始链接

时间线

  1. nvd_ingest NVD