Skip to content
OpenAdvisories

Archive

10 October 2017

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.5

    XML External Entity Reference in Apache NiFi

    An authorized user could upload a template which contained malicious code and accessed sensitive files via an XML External Entity (XXE) attack. The fix to properly handle XML External Entities was applied on the Apache NiFi 1.4.0 release. Users running a prio…

  • Medium 6.3

    salt leaks git usernames and passwords to the log

    salt before 2015.5.5 leaks git usernames and passwords to the log.