En bref
- CVE-2018-1309 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant org.apache.nifi:nifi-standard-processors, nifi (apache).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 4.4%, plus élevée que 91.4% des vulnérabilités.
- Correctif : mettre à jour vers 1.6.0 ou plus récent.
Description
Apache NiFi External XML Entity issue in SplitXML processor. Malicious XML content could cause information disclosure or remote code execution. The fix to disable external general entity parsing and disallow doctype declarations was applied on the Apache NiFi 1.6.0 release. Users running a prior 1.x release should upgrade to the appropriate release.
NVD description
Apache NiFi External XML Entity issue in SplitXML processor. Malicious XML content could cause information disclosure or remote code execution. The fix to disable external general entity parsing and disallow doctype declarations was applied on the Apache NiFi 1.6.0 release. Users running a prior 1.x release should upgrade to the appropriate release.
Autres vulnérabilités de org.apache.nifi:nifi-standard-processors
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free