[NIFI-12915] Upgrade follow-redirects to 1.15.6

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.0-M3
• Component/s: Core UI, NiFi Registry
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 18/Mar/24 13:14
• Updated: 18/Mar/24 13:22
• Resolved: 18/Mar/24 13:22

Description

The follow-redirects library for NiFi Registry UI and the new NiFi Web Frontend should be upgraded to 1.15.6 to mitigate CVE-2024-28849 related to Proxy Authorization header handling.

Issue Links

• links to: GitHub Pull Request #8523
• links to: GitHub Pull Request #8524