EUVD-2022-0689

Malicious code in bioql PyPI...

Exposure of Sensitive Information to an Unauthorized Actor in Apache NiFi

In the TransformXML processor of Apache NiFi before 1.15.1 an authenticated user could configure an XSLT file which, if it included malicious external entity calls, may reveal sensitive information...

GHSA-RQ96-QHC5-VM4R Exposure of Sensitive Information to an Unauthorized Actor in Apache NiFi

In the TransformXML processor of Apache NiFi before 1.15.1 an authenticated user could configure an XSLT file which, if it included malicious external entity calls, may reveal sensitive information...

PT-2021-24043

Name of the Vulnerable Software and Affected Versions: Apache NiFi versions prior to 1.15.1 Description: The issue allows an authenticated user to configure an XSLT file in the TransformXML processor, which may include malicious external entity calls, potentially revealing sensitive information...