XML External Entity (XXE)

org.apache.nifi:nifi-ccda-processors is vulnerable to XML External Entity XXE. An attacker is able to provide malicious XML input containing a reference to an external entity due to improper flow configurations in the ExtractCCDAAttributes Processor...

XML External Entity Reference in Apache NiFi

The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references. Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity...

GHSA-HXJP-Q6C3-38FX XML External Entity Reference in Apache NiFi

The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references. Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity...

CVE-2023-22832

The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references. Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity...

Xxe

The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references. Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity...

CVE-2023-22832

CVE-2023-22832 affects Apache NiFi: ExtractCCDAAttributes Processor (versions 1.2.0–1.19.1). The issue is improper handling of XML External Entity (XXE) references via XML Document Type Declarations, enabling attacks from malicious XML documents. The documented impact is high confidentiality risk...

CVE-2023-22832 Apache NiFi: Improper Restriction of XML External Entity References in ExtractCCDAAttributes

The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references. Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity...

CVE-2023-22832 Apache NiFi: Improper Restriction of XML External Entity References in ExtractCCDAAttributes

The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references. Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity...

CVE-2023-22832 Apache NiFi: Improper Restriction of XML External Entity References in ExtractCCDAAttributes

The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references. Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity...

PT-2023-18714 · Apache · Apache Nifi

Name of the Vulnerable Software and Affected Versions: Apache NiFi versions 1.2.0 through 1.19.1 Description: The ExtractCCDAAttributes Processor in Apache NiFi does not restrict XML External Entity references, making flow configurations that include this processor vulnerable to malicious XML...

Apache NiFi 代码问题漏洞

Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation and system intermediary logic. An XML external entity injection vulnerability exists in Apache NiFi versions 1.2.0 through 1.19.1, which stems fro...

CVE-2022-41915 vulnerabilities

Vulnerabilities for packages: apache-nifi...

CVE-2022-41915 vulnerabilities

Vulnerabilities for packages: apache-nifi...

GHSA-HH82-3PMQ-7FRP vulnerabilities

Vulnerabilities for packages: apache-nifi...

GHSA-HH82-3PMQ-7FRP vulnerabilities

Vulnerabilities for packages: apache-nifi...

GHSA-FX2C-96VJ-985V vulnerabilities

Vulnerabilities for packages: apache-nifi...

CVE-2022-41881 vulnerabilities

Vulnerabilities for packages: apache-nifi...

GHSA-JJJH-JJXP-WPFF vulnerabilities

Vulnerabilities for packages: cassandra, management-api-for-apache-cassandra-5.0, scala, cassandra-reaper...

GHSA-RGV9-Q543-RQG4 vulnerabilities

Vulnerabilities for packages: cassandra, management-api-for-apache-cassandra-5.0, scala, cassandra-reaper...

GHSA-RGV9-Q543-RQG4 vulnerabilities

Vulnerabilities for packages: cassandra, spark, management-api-for-apache-cassandra-4.1, scala, hadoop-fips, management-api-for-apache-cassandra-5.0, cassandra-reaper, management-api-for-apache-cassandra-4.0...