This is an automated email from the ASF dual-hosted git repository.
github-bot pushed a commit to branch asf-site
in repository https://gitbox.apache.org/repos/asf/nifi-site.git
The following commit(s) were added to refs/heads/asf-site by this push:
new fe5bcf2 Published changes from
b3e2c5f0445b1ed416f00ce7685c5a05f6ece992
fe5bcf2 is described below
commit fe5bcf2f03d22344f0f30d0657c7f37518871a9b
Author: github-actions[bot]
<41898282+github-actions[bot]@users.noreply.github.com>
AuthorDate: Mon Nov 27 21:51:25 2023 +0000
Published changes from b3e2c5f0445b1ed416f00ce7685c5a05f6ece992
---
security.html | 43 +++++++++++++++++++++++++++++++++++++++++++
sitemap.xml | 56 ++++++++++++++++++++++++++++----------------------------
2 files changed, 71 insertions(+), 28 deletions(-)
diff --git a/security.html b/security.html
index e16eda4..257ca5d 100644
--- a/security.html
+++ b/security.html
@@ -175,6 +175,49 @@
</div>
<div class="medium-space"></div>
+<div class="row">
+ <div class="large-12 columns features">
+ <h2><a id="1.24.0" href="#1.24.0">Fixed in Apache NiFi 1.24.0</a></h2>
+ </div>
+</div>
+<!-- Vulnerabilities -->
+<div class="row">
+ <div class="large-12 columns features">
+ <h2><a id="1.24.0-vulnerabilities"
href="#1.24.0-vulnerabilities">Vulnerabilities</a></h2>
+ </div>
+</div>
+<div class="row" style="background-color: aliceblue">
+ <div class="large-12 columns">
+ <p><a id="CVE-2023-49145"
href="#CVE-2023-49145"><strong>CVE-2023-49145</strong></a>: Improper
Neutralization of Input in Advanced User Interface for Jolt</p>
+ <p>Severity: <strong>High</strong></p>
+ <p>Versions Affected:</p>
+ <ul>
+ <li>Apache NiFi 0.7.0 - 1.23.2</li>
+ </ul>
+ </p>
+ <p>
+ Apache NiFi 0.7.0 through 1.23.2 include the JoltTransformJSON
+ Processor, which provides an advanced configuration user interface
that
+ is vulnerable to DOM-based cross-site scripting. If an
authenticated
+ user, who is authorized to configure a JoltTransformJSON Processor,
+ visits a crafted URL, then arbitrary
+ JavaScript code can be executed within the session context of the
+ authenticated user. Upgrading to Apache NiFi 1.24.0 or 2.0.0-M1 is
the recommended
+ mitigation.
+ </p>
+ <p>Credit: This issue was discovered by Dr. Oliver Matula, DB Systel
GmbH</p>
+ <p>CVE Link: <a
href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49145";
target="_blank">Mitre Database CVE-2023-49145</a></p>
+ <p>
+ NiFi Jira: <a
href="https://issues.apache.org/jira/browse/NIFI-12403";
target="_blank">NIFI-12403</a>
+ </p>
+ <p>
+ NiFi PR: <a href="https://github.com/apache/nifi/pull/8060";
target="_blank">PR 8060</a>
+ </p>
+ <p>Released: 2023-11-27</p>
+ </div>
+</div>
+<div class="medium-space"></div>
+
<div class="row">
<div class="large-12 columns features">
<h2><a id="1.23.1" href="#1.23.1">Fixed in Apache NiFi 1.23.1</a></h2>
diff --git a/sitemap.xml b/sitemap.xml
index 1e1fd78..705cc12 100644
--- a/sitemap.xml
+++ b/sitemap.xml
@@ -3,87 +3,87 @@
xmlns:xhtml="http://www.w3.org/1999/xhtml";>
<url>
<loc>https://nifi.apache.org/</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/fds.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/developer-guide.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/quickstart.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/docs.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/project-documentation.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/download.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/faq.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/fds-release-guide.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/licensing-guide.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/mailing_lists.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/minifi/</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/minifi/download.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/minifi/faq.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/minifi/getting-started.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/minifi/minifi-java-agent-quick-start.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/minifi/system-admin-guide.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/minifi/minifi-toolkit.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/nifi-maven-release-guide.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/registry.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/registry-security.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/release-guide.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/security.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/people.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/videos.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/gpg.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/minifi.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url><url>
<loc>https://nifi.apache.org/powered-by-nifi.html</loc>
- <lastmod>2023-11-27T09:30:03-06:00</lastmod>
+ <lastmod>2023-11-27T15:50:26-06:00</lastmod>
</url>
</urlset>
