spikeyjr/cve-2023-34468-pocEducational proof-of-concept for CVE-2023-34468 affecting Apache NiFi. Demonstrates H2 JDBC URL abuse leading to authenticated RCE in vulnerable NiFi versions.
Educational proof-of-concept (PoC) for CVE-2023-34468 affecting Apache NiFi versions prior to 1.22.0. This repository demonstrates how abuse of H2 JDBC URL configuration can lead to authenticated remote code execution (RCE) in vulnerable Apache NiFi installations.
CVE-2023-34468 is an authenticated remote code execution vulnerability affecting Apache NiFi controller services.
The vulnerability stems from the ability to configure an H2 JDBC URL using the INIT=RUNSCRIPT feature, allowing arbitrary code execution when vulnerable controller services are enabled.
This repository demonstrates the vulnerability in authorized laboratory environments for educational and research purposes.
INIT=RUNSCRIPT executionThe vulnerability arises from abuse of H2 JDBC URLs through the INIT=RUNSCRIPT functionality. When a vulnerable controller service is enabled, an attacker with sufficient privileges may achieve arbitrary code execution.
git clone https://github.com/spikeyjr/CVE-2023-34468-PoC.git
cd CVE-2023-34468-PoC
pip install requests
python3 cve_2023_34468_poc.py
.
├── cve_2023_34468_poc.py
├── README.md
├── LICENSE
└── .gitignore
This repository is intended solely for educational purposes and authorized security testing.
Use this code only against systems you own or systems for which you have explicit permission to assess.
The author assumes no responsibility for misuse or damage caused by this software.
https://nvd.nist.gov/vuln/detail/CVE-2023-34468
https://nifi.apache.org/security.html
CVE-2023-34468, Apache NiFi, H2 JDBC, INIT=RUNSCRIPT, authenticated RCE, proof-of-concept, PoC, remote code execution, cybersecurity, security research, penetration testing, Python, Apache NiFi exploit, CVE-2023-34468 PoC.