Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2022/05/14 3:16 a.m.32 views

Improper Restriction of XML External Entity Reference in Apache NiFi

Apache NiFi External XML Entity issue in SplitXML processor. Malicious XML content could cause information disclosure or remote code execution. The fix to disable external general entity parsing and disallow doctype declarations was applied on the Apache NiFi 1.6.0 release. Users running a prior...

9.8CVSS2.8AI score0.0452EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2018/05/23 2:29 p.m.36 views

CVE-2018-1309

Apache NiFi External XML Entity issue in SplitXML processor. Malicious XML content could cause information disclosure or remote code execution. The fix to disable external general entity parsing and disallow doctype declarations was applied on the Apache NiFi 1.6.0 release. Users running a prior...

9.8CVSS9.5AI score0.0452EPSS
SaveExploits0References1
Prion
Prion
added 2018/05/23 2:29 p.m.18 views

Information disclosure

Apache NiFi External XML Entity issue in SplitXML processor. Malicious XML content could cause information disclosure or remote code execution. The fix to disable external general entity parsing and disallow doctype declarations was applied on the Apache NiFi 1.6.0 release. Users running a prior...

7.5CVSS9.4AI score0.0452EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder