Lucene search
PRIOn knowledge basePRION:CVE-2021-44145HistoryDec 17, 2021 - 9:15 a.m.
Xxe
2021-12-1709:15:00
PRIOn knowledge base
www.prio-n.com
8
In the TransformXML processor of Apache NiFi before 1.15.1 an authenticated user could configure an XSLT file which, if it included malicious external entity calls, may reveal sensitive information.
Related
cvelist
cvelist
CVE-2021-44145 Apache NiFi information disclosure by XXE
2021-12-17 08:50:09
nvd
nvd
CVE-2021-44145
2021-12-17 09:15:07
github
github
Exposure of Sensitive Information to an Unauthorized Actor in Apache NiFi
2022-01-05 17:33:32
veracode
veracode
XML External Entity (XXE) Injection
2021-12-20 02:55:12
osv
osv
CVE-2021-44145
2021-12-17 09:15:07
Exposure of Sensitive Information to an Unauthorized Actor in Apache NiFi
2022-01-05 17:33:32
cve
cve
CVE-2021-44145
2021-12-17 09:15:07
cnvd
cnvd
Apache NiFi Code Issue Vulnerability (CNVD-2021-102797)
2021-12-21 00:00:00