PT-2023-18714

Name of the Vulnerable Software and Affected Versions Apache NiFi versions 1.2.0 through 1.19.1 Description The ExtractCCDAAttributes Processor in Apache NiFi does not restrict XML External Entity references, making flow configurations that include this processor vulnerable to malicious XML...