Approved changes feed: RSS · Atom

cpe:2.3:a:apache:nutch:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductNutch (8f6bd53e-c434-546e-a862-675d9843172c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:apache/nutch purl2cpe 2026-06-01 10:14:23.780714
pkg:docker/apache/nutch purl2cpe 2026-06-01 10:14:23.780717
pkg:github/apache/nutch purl2cpe 2026-06-01 10:14:23.780720
pkg:maven/org.apache.nutch/nutch purl2cpe 2026-06-01 10:14:23.780722

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-23901 vulnerable 2026-06-08 05:30:03.379958 An XML external entity (XXE) injection vulnerability exists in the Nutch DmozParser
An XML external entity (XXE) injection vulnerability was discovered in the Nutch DmozParser and is known to affect Nutch versions < 1.18. XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data. It often allows an attacker to view files on the application server filesystem, and to interact with any back-end or external systems that the application itself can access. This issue is fixed in Apache Nutch 1.18.
Published: 2021-01-25T09:25:14.000Z
Updated: 2025-02-13T16:27:46.383Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.