A high-severity data amplification vulnerability in Apache NiFi may lead to resource exhaustion and service disruption.

The application improperly handles highly compressed data (CWE-409), allowing an authenticated attacker to trigger significant resource consumption through data amplification.

Successful exploitation of this vulnerability can cause severe denial of service conditions by overwhelming system resources such as CPU and memory. With a CVSS score of 8.8, this flaw represents a significant risk to the availability and stability of critical data processing pipelines.

Immediate Action: Review the provided Apache advisory thread for guidance on potential configuration changes or available patches as they are released.

Proactive Monitoring: Monitor system resource usage, specifically CPU and memory consumption, for spikes related to compressed data processing tasks.

Compensating Controls: Implement rate limiting and input validation for incoming compressed data streams to prevent the processing of maliciously crafted, highly compressed files.

Public Exploit Available: No

Due to the high severity of this resource exhaustion vulnerability, administrators should monitor the Apache NiFi project for immediate patch releases. In the interim, strictly control the sources of data allowed to be processed by the NiFi instances to minimize the risk of a denial of service attack.