CVE-2018-1309

Apache NiFi External XML Entity issue in SplitXML processor. Malicious XML content could cause information disclosure or remote code execution. The fix to disable external general entity parsing and disallow doctype declarations was applied on the Apache NiFi 1.6.0 release. Users running a prior 1.x release should upgrade to the appropriate release.

• CWE-611

• https://nifi.apache.org/security.html#CVE-2018-1309Patch, Vendor Advisory
• https://nifi.apache.org/security.html#CVE-2018-1309Patch, Vendor Advisory

Published

May 23, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-13084The mintToken function of a smart contract implementation fo…7.5
• CVE-2018-13085The mintToken function of a smart contract implementation fo…
• CVE-2018-13086The mintToken function of a smart contract implementation fo…
• CVE-2018-13087The mintToken function of a smart contract implementation fo…7.5
• CVE-2018-13088The mintToken function of a smart contract implementation fo…7.5
• CVE-2018-13089The mintToken function of a smart contract implementation fo…
• CVE-2018-13090The mintToken function of a smart contract implementation fo…
• CVE-2018-13091The mintToken function of a smart contract implementation fo…
• CVE-2018-13092The mintToken function of a smart contract implementation fo…
• CVE-2018-13093An issue was discovered in fs/xfs/xfs_icache.c in the Linux …
• CVE-2018-13094An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in …
• CVE-2018-13095An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in …