Description
Apache NiFi 是美国阿帕奇（Apache）基金会的一套数据处理和分发系统。该系统主要用于数据路由、转换和系统中介逻辑。Apache NiFi 存在远程命令执行漏洞， 攻击者可以利用该漏洞执行任意命令。
Apache NiFi API 远程命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/middleware/Apache-NiFi-Api-%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C-RCE.md
https://www.modb.pro/db/157071
https://www.secevery.com/toBugInfo?id=1866391129291538433
https://blog.csdn.net/murphysec/article/details/132101258
https://avd.aliyun.com/detail?id=AVD-2023-36542
https://www.ddpoc.com/DVB-2021-2237.html
https://nvd.nist.gov/vuln/detail/CVE-2023-34468
https://www.rapid7.com/db/modules/exploit/linux/http/apache_nifi_h2_rce/
https://nifi.apache.org/security.html#CVE-2023-34468