Lucene search
PRIOn knowledge basePRION:CVE-2018-1309HistoryMay 23, 2018 - 2:29 p.m.
Information disclosure
2018-05-2314:29:00
PRIOn knowledge base
www.prio-n.com
2
Apache NiFi External XML Entity issue in SplitXML processor. Malicious XML content could cause information disclosure or remote code execution. The fix to disable external general entity parsing and disallow doctype declarations was applied on the Apache NiFi 1.6.0 release. Users running a prior 1.x release should upgrade to the appropriate release.
References
Related
nvd
nvd
CVE-2018-1309
2018-05-23 14:29:00
osv
osv
CVE-2018-1309
2018-05-23 14:29:00
Improper Restriction of XML External Entity Reference in Apache NiFi
2022-05-14 03:16:17
github
github
Improper Restriction of XML External Entity Reference in Apache NiFi
2022-05-14 03:16:17
veracode
veracode
XML External Entities (XXE)
2018-05-24 06:53:32
cve
cve
CVE-2018-1309
2018-05-23 14:29:00
cvelist
cvelist
CVE-2018-1309
2018-04-08 00:00:00