CVE-2022-29265

Multiple components in Apache NiFi 0.0.1 to 1.16.0 do not restrict XML External Entity references in the default configuration. The Standard Content Viewer service attempts to resolve XML External Entity references when viewing formatted XML files. The following Processors attempt to resolve XML...

PT-2022-19510

Name of the Vulnerable Software and Affected Versions Apache NiFi versions 0.0.1 through 1.16.0 Description The issue concerns multiple components in Apache NiFi that do not restrict XML External Entity references in the default configuration. Specifically, the Standard Content Viewer service and...

CVE-2022-29265: Improper Restriction of XML External Entity Reference

Multiple components in Apache NiFi 0.0.1 to 1.16.0 do not restrict XML External Entity references in the default configuration. The Standard Content Viewer service attempts to resolve XML External Entity references when viewing formatted XML files. The following Processors attempt to resolve XML...