Описание
Cross-site Scripting in Apache NiFi
In Apache NiFi before 0.7.4 and 1.x before 1.3.0, there are certain user input components in the UI which had been guarding for some forms of XSS issues but were insufficient.
Пакеты
Наименование
org.apache.nifi:nifi
maven
Затронутые версииВерсия исправления
< 0.7.4
0.7.4
Наименование
org.apache.nifi:nifi
maven
Затронутые версииВерсия исправления
>= 1.0.0, < 1.3.0
1.3.0
Связанные уязвимости
CVSS3: 6.1
nvd
больше 8 лет назад
In Apache NiFi before 0.7.4 and 1.x before 1.3.0, there are certain user input components in the UI which had been guarding for some forms of XSS issues but were insufficient.