Security Advisory

CVE-2018-1309

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-05-23 14:00:00

Last updated 2024-09-16 16:13:12

Assigner apache

CVSS score not scored

State PUBLISHED

Description

Apache NiFi External XML Entity issue in SplitXML processor. Malicious XML content could cause information disclosure or remote code execution. The fix to disable external general entity parsing and disallow doctype declarations was applied on the Apache NiFi 1.6.0 release. Users running a prior 1.x release should upgrade to the appropriate release.

← Browse all CVEs View on cve.org ↗