Skip to content
OpenAdvisories

Package · Maven

org.apache.nifi:nifi-security

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2019-10080

    Apache NiFi information disclosure by XXE

    The XMLFileLookupService in NiFi versions 1.3.0 to 1.9.2 allowed trusted users to inadvertently configure a potentially malicious XML file. The XML file has the ability to make external calls to services (via XXE) and reveal information such as the versions o…

    org.apache.nifi:nifi org.apache.nifi:nifi-security Maven