https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 17:57:22 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-29850 cnvd-2017-29850 https://cve.radiocsirt.org/vuln/cnvd-2017-29850 https://cve.radiocsirt.org/vuln/euvd-2026-163627 EUVD-2026-163627 https://cve.radiocsirt.org/vuln/euvd-2026-163627 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12623 <p>An authorized user could upload a template which contained malicious code and accessed sensitive files via an XML External Entity (XXE) attack. The fix to properly handle XML External Entities was applied on the Apache NiFi 1.4.0 release. Users running a prior 1.x release should upgrade to the appropriate release.</p> <p>An authorized user could upload a template which contained malicious code and accessed sensitive files via an XML External Entity (XXE) attack. The fix to properly handle XML External Entities was applied on the Apache NiFi 1.4.0 release. Users running a prior 1.x release should upgrade to the appropriate release.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-12623 https://cve.radiocsirt.org/vuln/ghsa-qj7f-j6h9-g5rq <p><strong>Affected:</strong> Maven: org.apache.nifi:nifi</p> <p>An authorized user could upload a template which contained malicious code and accessed sensitive files via an XML External Entity (XXE) attack. The fix to properly handle XML External Entities was applied on the Apache NiFi 1.4.0 release. Users running a prior 1.x release should upgrade to the appropriate release.</p> <p><strong>Affected:</strong> Maven: org.apache.nifi:nifi</p> <p>An authorized user could upload a template which contained malicious code and accessed sensitive files via an XML External Entity (XXE) attack. The fix to properly handle XML External Entities was applied on the Apache NiFi 1.4.0 release. Users running a prior 1.x release should upgrade to the appropriate release.</p> https://cve.radiocsirt.org/vuln/ghsa-qj7f-j6h9-g5rq https://cve.radiocsirt.org/vuln/gsd-2017-12623 gsd-2017-12623 https://cve.radiocsirt.org/vuln/gsd-2017-12623