mbadanoiu/CVE-2023-40037

PoC

CVE-2023-40037: Incomplete Validation of JDBC and JNDI Connection URLs in Apache NiFi

view exploit source poc_in_githubauthor mbadanoiupublished 2023-11-23catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-40037US	medium6.5	2.08% (81st)	Exploit	2023-08-18
Apache NiFi 1.21.0 through 1.23.0 support JDBC and JNDI JMS access in several Processors and Controller Services with connection URL validation that does not provide sufficient pro…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.