Apache NiFi Code Issue Vulnerability (CNVD-2021-102797)

Apache NiFi is a data processing and distribution system from the Apache Foundation in the United States. The system is primarily used for data routing, transformation, and system broker logic.A code issue vulnerability exists in Apache NiFi’s TransformXML, which stems from a vulnerability in Apache NiFi’s TransformXML processor prior to 1.15.1, where an authenticated user can configure an XSLT file that, if it contains a malicious external entity call, it could expose sensitive information. No detailed vulnerability details are currently available.