CVE-2021-44145 | BDVDB-2026-166156 Detail

ApacheApache NiFi

Description#

In the TransformXML processor of Apache NiFi before 1.15.1 an authenticated user could configure an XSLT file which, if it included malicious external entity calls, may reveal sensitive information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://nifi.apache.org/security.html#1.15.1-vulnerabilities
http://www.openwall.com/lists/oss-security/2021/12/17/1

Exploit#

No public exploit known

History#

Version 12021-12-17Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.