CVE-2021-44145

Name of the Vulnerable Software and Affected Versions: Apache NiFi versions prior to 1.15.1

Description: The issue allows an authenticated user to configure an XSLT file in the TransformXML processor, which may include malicious external entity calls, potentially revealing sensitive information.

Recommendations: For versions prior to 1.15.1, update to version 1.15.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the TransformXML processor to minimize the risk of exploitation.