Lucene search
Veracode Vulnerability DatabaseVERACODE:27510HistoryOct 02, 2020 - 5:21 a.m.
XML External Entity (XXE)
2020-10-0205:21:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.0004 Low
EPSS
Percentile
12.9%
nifi-framework-api is vulnerable to XML external entity (XXE) attack. An attacker is able to submit requests on behalf of the server via an XXE attack as the notification service manager and various policy authorizer and user group provider objects allow trusted administrators to inadvertently configure a potentially malicious XML file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nifi-framework-api | le | 1.11.4 |
Related
cve
cve
CVE-2020-13940
2020-10-01 20:15:13
osv
osv
CVE-2020-13940
2020-10-01 20:15:13
Improper Restriction of XML External Entity Reference in Apache NiFi
2022-01-06 20:41:00
cvelist
cvelist
CVE-2020-13940
2020-10-01 19:55:16
nvd
nvd
CVE-2020-13940
2020-10-01 20:15:13
prion
prion
Code injection
2020-10-01 20:15:00
github
github
Improper Restriction of XML External Entity Reference in Apache NiFi
2022-01-06 20:41:00