https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T17:51:09.490490+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-29850 cnvd-2017-29850 2026-10-15T17:51:09.493907+00:00 cnvd-2017-29850 https://cve.radiocsirt.org/vuln/euvd-2026-163627 EUVD-2026-163627 2026-10-15T17:51:09.493955+00:00 EUVD-2026-163627 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12623 fkie_cve-2017-12623 2026-10-15T17:51:09.493978+00:00

An authorized user could upload a template which contained malicious code and accessed sensitive files via an XML External Entity (XXE) attack. The fix to properly handle XML External Entities was applied on the Apache NiFi 1.4.0 release. Users running a prior 1.x release should upgrade to the appropriate release.

 https://cve.radiocsirt.org/vuln/ghsa-qj7f-j6h9-g5rq GHSA-qj7f-j6h9-g5rq — XML External Entity Reference in Apache NiFi 2026-10-15T17:51:09.494033+00:00

Affected: Maven: org.apache.nifi:nifi

An authorized user could upload a template which contained malicious code and accessed sensitive files via an XML External Entity (XXE) attack. The fix to properly handle XML External Entities was applied on the Apache NiFi 1.4.0 release. Users running a prior 1.x release should upgrade to the appropriate release.

 https://cve.radiocsirt.org/vuln/gsd-2017-12623 gsd-2017-12623 2026-10-15T17:51:09.494076+00:00 gsd-2017-12623