Описание
Exposure of Sensitive Information to an Unauthorized Actor in Apache NiFi
In the TransformXML processor of Apache NiFi before 1.15.1 an authenticated user could configure an XSLT file which, if it included malicious external entity calls, may reveal sensitive information.
Пакеты
Наименование
org.apache.nifi:nifi
maven
Затронутые версииВерсия исправления
< 1.15.1
1.15.1
Связанные уязвимости
CVSS3: 6.5
nvd
около 4 лет назад
In the TransformXML processor of Apache NiFi before 1.15.1 an authenticated user could configure an XSLT file which, if it included malicious external entity calls, may reveal sensitive information.