Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 08:25:22 +0000 BIT-nifi-2023-22832 — Apache NiFi: Improper Restriction of XML External Entity References in ExtractCCDAAttributes https://cve.radiocsirt.org/vuln/bit-nifi-2023-22832 <p><strong>Affected:</strong> Bitnami: nifi</p> <p>The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references.</p> <p>Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity references.</p> <p>The resolution disables Document Type Declarations and disallows XML External Entity resolution in the ExtractCCDAAttributes Processor.</p> <p><strong>Affected:</strong> Bitnami: nifi</p> <p>The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references.</p> <p>Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity references.</p> <p>The resolution disables Document Type Declarations and disallows XML External Entity resolution in the ExtractCCDAAttributes Processor.</p> https://cve.radiocsirt.org/vuln/bit-nifi-2023-22832 cnvd-2023-23555 https://cve.radiocsirt.org/vuln/cnvd-2023-23555 cnvd-2023-23555 https://cve.radiocsirt.org/vuln/cnvd-2023-23555 EUVD-2026-224549 https://cve.radiocsirt.org/vuln/euvd-2026-224549 EUVD-2026-224549 https://cve.radiocsirt.org/vuln/euvd-2026-224549 fkie_cve-2023-22832 https://cve.radiocsirt.org/vuln/fkie_cve-2023-22832 <p>The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references.</p> <p>Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity references.</p> <p>The resolution disables Document Type Declarations and disallows XML External Entity resolution in the ExtractCCDAAttributes Processor.</p> <p>The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references.</p> <p>Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity references.</p> <p>The resolution disables Document Type Declarations and disallows XML External Entity resolution in the ExtractCCDAAttributes Processor.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-22832 GHSA-hxjp-q6c3-38fx — XML External Entity Reference in Apache NiFi https://cve.radiocsirt.org/vuln/ghsa-hxjp-q6c3-38fx <p><strong>Affected:</strong> Maven: org.apache.nifi:nifi-ccda-processors</p> <p>The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references. Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity references. The resolution disables Document Type Declarations and disallows XML External Entity resolution in the ExtractCCDAAttributes Processor.</p> <p><strong>Affected:</strong> Maven: org.apache.nifi:nifi-ccda-processors</p> <p>The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references. Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity references. The resolution disables Document Type Declarations and disallows XML External Entity resolution in the ExtractCCDAAttributes Processor.</p> https://cve.radiocsirt.org/vuln/ghsa-hxjp-q6c3-38fx gsd-2023-22832 https://cve.radiocsirt.org/vuln/gsd-2023-22832 gsd-2023-22832 https://cve.radiocsirt.org/vuln/gsd-2023-22832 WID-SEC-W-2023-0325 — Apache Nifi: Schwachstelle ermöglicht Offenlegung von Informationen https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0325 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Nifi ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Nifi ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0325