{"action":"Upgrade org.apache.nifi:nifi to 1.4.0 or later.","affected":[{"fixed":"1.4.0","introduced":"1.0.0"}],"component":"org.apache.nifi:nifi","cve_ids":["CVE-2017-12623"],"ecosystem":"Maven","epss":0.0194,"exploited":false,"fixed_versions":["1.4.0"],"ghsa_id":"GHSA-qj7f-j6h9-g5rq","id":"tcs_01M5N99NQEQY9TBVG8YZ270XVM","modified_at":"2023-11-08T03:58:53.487680Z","published_at":"2022-05-17T00:26:27Z","references":["https://osv.dev/vulnerability/GHSA-qj7f-j6h9-g5rq","https://nvd.nist.gov/vuln/detail/CVE-2017-12623","https://nifi.apache.org/security.html#CVE-2017-12623"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-qj7f-j6h9-g5rq","url":"https://osv.dev/vulnerability/GHSA-qj7f-j6h9-g5rq"}],"summary":"XML External Entity Reference in Apache NiFi"}