Lucene search
Veracode Vulnerability DatabaseVERACODE:39256HistoryFeb 14, 2023 - 7:32 a.m.
XML External Entity (XXE)
2023-02-1407:32:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
xml external entity (xxe)
apache nifi
extractccdaattributes
software vulnerability
0.001 Low
EPSS
Percentile
48.4%
org.apache.nifi:nifi-ccda-processors is vulnerable to XML External Entity (XXE). An attacker is able to provide malicious XML input containing a reference to an external entity due to improper flow configurations in the ExtractCCDAAttributes Processor.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nifi-ccda-processors | le | 1.19.1 | |
| nifi-ccda-processors | le | 1.19.1 |
Related
github
github
XML External Entity Reference in Apache NiFi
2023-02-10 09:30:23
cnvd
cnvd
Apache NiFi XML External Entity Injection Vulnerability (CNVD-2023-23555)
2023-02-15 00:00:00
nvd
nvd
CVE-2023-22832
2023-02-10 08:15:12
cve
cve
CVE-2023-22832
2023-02-10 08:15:12
prion
prion
Xxe
2023-02-10 08:15:00
osv
osv
CVE-2023-22832
2023-02-10 08:15:12
XML External Entity Reference in Apache NiFi
2023-02-10 09:30:23
cvelist
cvelist