CVE-2021-44145

Apache NiFi information disclosure by XXE

published December 17, 2021

CVSS
—
EPSS
2%
Percentile
77.8
In the wild
Unconfirmed
What it is

In the TransformXML processor of Apache NiFi before 1.15.1 an authenticated user could configure an XSLT file which, if it included malicious external entity calls, may reveal sensitive information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01757 · 77.8th percentile
Published
2021-12-17T08:50Z
EPSS history
Timeline
  • 17 DEC 08:50Z
    Apache NiFi information disclosure by XXE
    cvelistv5