Lucene search
PRIOn knowledge basePRION:CVE-2017-12623HistoryOct 10, 2017 - 6:29 p.m.
Xxe
2017-10-1018:29:00
PRIOn knowledge base
www.prio-n.com
An authorized user could upload a template which contained malicious code and accessed sensitive files via an XML External Entity (XXE) attack. The fix to properly handle XML External Entities was applied on the Apache NiFi 1.4.0 release. Users running a prior 1.x release should upgrade to the appropriate release.
References
Related
cve
cve
CVE-2017-12623
2017-10-10 18:29:00
github
github
XML External Entity Reference in Apache NiFi
2022-05-17 00:26:27
osv
osv
XML External Entity Reference in Apache NiFi
2022-05-17 00:26:27
CVE-2017-12623
2017-10-10 18:29:00
veracode
veracode
XML External Entities (XXE) Attacks
2017-10-11 07:44:06
nvd
nvd
CVE-2017-12623
2017-10-10 18:29:00
cvelist
cvelist
CVE-2017-12623
2017-10-02 00:00:00