Sensitive information sent insecurely In org.apache.nifi:nifi
Description
Exposure of Sensitive Information to an Unauthorized Actor in Apache NiFi In the TransformXML processor of Apache NiFi before 1.15.1 an authenticated user could configure an XSLT file which, if it included malicious external entity calls, may reveal sensitive information.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 maven | 1.15.1 |
Aliases
1. 2. 3. 4.
References
1. 2.