[NIFI-8929] Upgrade Apache POI to 5.0.0

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.15.0
• Fix Version/s: 1.15.0
• Component/s: Extensions
• Labels: security
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 20/Jul/21 14:07
• Updated: 21/Jul/21 09:44
• Resolved: 21/Jul/21 09:44

Description

The nifi-poi-bundle and nifi-email-bundle modules depend on the Apache POI library for handling Microsoft documents. The current modules depend on 4.0.1, which has a vulnerability related to XML External Entity Processing. Apache POI 5.0.0 resolves this vulnerability and provides a compatible upgrade.

Issue Links

• links to: GitHub Pull Request #5234