{"action":"Upgrade org.apache.nifi:nifi-ccda-processors to 1.20.0 or later.","affected":[{"fixed":"1.20.0","introduced":"1.2.0"}],"component":"org.apache.nifi:nifi-ccda-processors","cve_ids":["CVE-2023-22832"],"ecosystem":"Maven","epss":0.0141,"exploited":false,"fixed_versions":["1.20.0"],"ghsa_id":"GHSA-hxjp-q6c3-38fx","id":"tcs_01M5N91MPV0Z2NWQNAZ5GZE1V1","modified_at":"2025-09-15T07:42:12.339660Z","published_at":"2023-02-10T09:30:23Z","references":["https://osv.dev/vulnerability/GHSA-hxjp-q6c3-38fx","https://nvd.nist.gov/vuln/detail/CVE-2023-22832","https://github.com/apache/nifi/commit/e966336e8966cf0cbbd12a2c4f2d73a7ceb75cd8","https://github.com/apache/nifi","https://lists.apache.org/thread/b51qs6y7b7r58vovddkv6wc16g2xbl3w","https://nifi.apache.org/security.html#CVE-2023-22832"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-hxjp-q6c3-38fx","url":"https://osv.dev/vulnerability/GHSA-hxjp-q6c3-38fx"}],"summary":"XML External Entity Reference in Apache NiFi"}