CVE-2023-22832
1 advisory.
Maven/org.apache.nifi:nifi-ccda-processors CVE-2023-22832: high 7.5
XML External Entity Reference in Apache NiFi
Action: Upgrade org.apache.nifi:nifi-ccda-processors to 1.20.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.2.0 | 1.20.0 | - |
Fixed versions
| 1.20.0 |
Sources
- osv: GHSA-hxjp-q6c3-38fx
- https://nvd.nist.gov/vuln/detail/CVE-2023-22832
- https://github.com/apache/nifi/commit/e966336e8966cf0cbbd12a2c4f2d73a7ceb75cd8
- https://github.com/apache/nifi
- https://lists.apache.org/thread/b51qs6y7b7r58vovddkv6wc16g2xbl3w
- https://nifi.apache.org/security.html#CVE-2023-22832
CVE-2023-22832 · published · modified · JSON