GHSA-m5r7-w9v3-ghmx

ghsaUSosv

Cross-site Scripting in Apache NiFi

view advisory published 2022-05-17Licence: CC-BY-4.0

In Apache NiFi before 0.7.4 and 1.x before 1.3.0, there are certain user input components in the UI which had been guarding for some forms of XSS issues but were insufficient.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2017-7665US	medium6.1	3.51% (89th)	—	2017-06-12
In Apache NiFi before 0.7.4 and 1.x before 1.3.0, there are certain user input components in the UI which had been guarding for some forms of XSS issues but were insufficient.

references

External citations — patches, advisories, analysis.

http://www.securityfocus.com/bid/99009WEB
https://lists.apache.org/thread.html/d779d6129de1a5aa149c219b2fc6e9e78156614eaac92a89cbaf9bce@%3Cdev.nifi.apache.org%3EWEB
https://nvd.nist.gov/vuln/detail/CVE-2017-7665ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan