CVE-2017-12623 | BDVDB-2026-91393 Detail

ApacheApache NiFi

Description#

An authorized user could upload a template which contained malicious code and accessed sensitive files via an XML External Entity (XXE) attack. The fix to properly handle XML External Entities was applied on the Apache NiFi 1.4.0 release. Users running a prior 1.x release should upgrade to the appropriate release.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://nifi.apache.org/security.html#CVE-2017-12623

Exploit#

No public exploit known

History#

Version 12017-10-10Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.