Lucene search
Veracode Vulnerability DatabaseVERACODE:6375HistoryMay 24, 2018 - 6:53 a.m.
XML External Entities (XXE)
2018-05-2406:53:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.004 Low
EPSS
Percentile
75.1%
nifi-standard-processors is vulnerable to XML external entities (XXE) attacks. The vulnerability exists due to the lack of proper default configuration which disables external entities by default, allowing XXE attacks to occur.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nifi-standard-processors | le | 1.5.0 |
Related
nvd
nvd
CVE-2018-1309
2018-05-23 14:29:00
osv
osv
CVE-2018-1309
2018-05-23 14:29:00
Improper Restriction of XML External Entity Reference in Apache NiFi
2022-05-14 03:16:17
github
github
Improper Restriction of XML External Entity Reference in Apache NiFi
2022-05-14 03:16:17
cve
cve
CVE-2018-1309
2018-05-23 14:29:00
prion
prion
Information disclosure
2018-05-23 14:29:00
cvelist
cvelist
CVE-2018-1309
2018-04-08 00:00:00