Lucene search
Veracode Vulnerability DatabaseVERACODE:5265HistoryOct 11, 2017 - 7:44 a.m.
XML External Entities (XXE) Attacks
2017-10-1107:44:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.0005 Low
EPSS
Percentile
17.3%
apache-nifi is vulnerable to XML External Entities (XXE) attacks. The library does not properly handle XML template files, allowing a malicious user to inject external entities that can lead to sensitive information being displayed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nifi-framework-core | le | 1.3.0 |
Related
cve
cve
CVE-2017-12623
2017-10-10 18:29:00
prion
prion
Xxe
2017-10-10 18:29:00
github
github
XML External Entity Reference in Apache NiFi
2022-05-17 00:26:27
osv
osv
XML External Entity Reference in Apache NiFi
2022-05-17 00:26:27
CVE-2017-12623
2017-10-10 18:29:00
nvd
nvd
CVE-2017-12623
2017-10-10 18:29:00
cvelist
cvelist
CVE-2017-12623
2017-10-02 00:00:00