CVE-2018-17194 affects Apache NiFi versions prior to 1.8.0, where a crafted DELETE request with a non-zero Content-Length could cause cluster nodes to timeout. This vulnerability has a CVSS score of 7.5 (HIGH), indicating a network-based attack with low complexity that can lead to high availability impact. There is no known active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE. Users are advised to upgrade to Apache NiFi 1.8.0 or later to mitigate this issue.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 1.0.0, <= 1.7.1CPE matchmatch criteria | cpe:2.3:a:apache:nifi:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.