Log injection In org.apache.nifi:nifi-stateless
Description
Insertion of Sensitive Information into Log File in Apache NiFi Stateless In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive property values. When a flow was triggered, the flow definition configuration JSON was printed, potentially containing sensitive values in plaintext.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 maven | 1.12.0-rc1 |
Aliases
1. 2. 3. 4.
References
1. 2.