Description
Apache NiFi H2 JDBC 远程代码执行漏洞(CVE-2023-34468)
Apache NiFi H2 JDBC 远程代码执行漏洞(CVE-2023-34468)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-34468
https://nifi.apache.org/security.html#CVE-2023-34468
https://www.sonicwall.com/blog/apache-nifi-code-injection-cve-2023-34468-
https://github.com/mbadanoiu/CVE-2023-34468
https://www.cyfirma.com/outofband/apache-nifi-cve-2023-34468-rce-vulnerability-analysis-and-exploitation/
https://www.rapid7.com/db/modules/exploit/linux/http/apache_nifi_h2_rce/
https://www.securityweek.com/hackers-set-sights-on-apache-nifi-flaw-that-exposes-many-organizations-to-attacks/
https://cn-sec.com/archives/1809817.html
https://zhuanlan.zhihu.com/p/637232007