[
https://issues.apache.org/jira/browse/NIFI-11659?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
David Handermann updated NIFI-11659:
------------------------------------
Fix Version/s: 1.23.0
(was: 1.latest)
> Remove vulnerable org.codehaus.jackson dependencies to partially mitigate
> CVE-2019-10202
> ----------------------------------------------------------------------------------------
>
> Key: NIFI-11659
> URL: https://issues.apache.org/jira/browse/NIFI-11659
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Core Framework, Extensions
> Reporter: Nandor Soma Abonyi
> Assignee: Nandor Soma Abonyi
> Priority: Major
> Fix For: 2.0.0, 1.23.0
>
> Time Spent: 20m
> Remaining Estimate: 0h
>
> Removing direct org.codehaus.jackson dependencies to mitigate CVE-2019-10202
> ([https://devhub.checkmarx.com/cve-details/CVE-2019-10202/?utm_source=jetbrains&utm_medium=referral&utm_campaign=idea])
> Unfortunately the latest ranger dependency, still depends on it, so
> transitively we will still have this vulnerability. Worth to track
> [https://mvnrepository.com/artifact/org.apache.ranger/ranger-plugins-common]
> for future upgrades.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
