Details
-
Improvement
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
None
Description
The PostgreSQL JDBC Driver in versions prior to 42.7.2 is vulnerable to SQL injection using a non-default configuration property. The PostgreSQL JDBC Driver is not distributed in any NiFi components, it is only used as a dependency for integration tests, but it should be upgraded to avoid warnings related to CVE-2024-1597.