Lucene search
GoogleOSV:CVE-2018-1309HistoryMay 23, 2018 - 2:29 p.m.
CVE-2018-1309
2018-05-2314:29:00
Google
osv.dev
3
Apache NiFi External XML Entity issue in SplitXML processor. Malicious XML content could cause information disclosure or remote code execution. The fix to disable external general entity parsing and disallow doctype declarations was applied on the Apache NiFi 1.6.0 release. Users running a prior 1.x release should upgrade to the appropriate release.
Related
github
github
Improper Restriction of XML External Entity Reference in Apache NiFi
2022-05-14 03:16:17
veracode
veracode
XML External Entities (XXE)
2018-05-24 06:53:32
nvd
nvd
CVE-2018-1309
2018-05-23 14:29:00
osv
osv
Improper Restriction of XML External Entity Reference in Apache NiFi
2022-05-14 03:16:17
prion
prion
Information disclosure
2018-05-23 14:29:00
cvelist
cvelist
CVE-2018-1309
2018-05-23 14:00:00
cve
cve
CVE-2018-1309
2018-05-23 14:29:00