Description
ApacheNiFi是一款用于提取、转换和加载数据的软件工具。NiFi通过内置处理器集成了许多不同的数据类型和文件格式。通过集成FTL、SQL、CSV、Snowflake、Kafka、AWS等，处理数据变得像拖放一样简单。Apache NiFi 中存在未授权访问漏洞，可能允许攻击者未经授权访问系统中的敏感信息，造成数据信息泄露。
Apache Nifi 信息泄露漏洞（CVE-2024-56512)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-56512
https://nifi.apache.org/documentation/security/
https://lists.apache.org/thread/cjc8fns5kjsho0s7vonlnojokyfx47wn
http://www.openwall.com/lists/oss-security/2024/12/28/1
https://github.com/absholi7ly/CVE-2024-56512-Apache-NiFi-Exploit
https://pentest-tools.com/vulnerabilities-exploits/apache-nifi-information-disclosure_26060
https://securityonline.info/cve-2024-56512-apache-nifi-vulnerability-exposes-sensitive-data-to-unauthorized-users/
https://vulners.com/cve/CVE-2024-56512
https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=35245