CVE-2017-7665: XSS
First published: Mon Jun 12 2017(Updated: )
In Apache NiFi before 0.7.4 and 1.x before 1.3.0, there are certain user input components in the UI which had been guarding for some forms of XSS issues but were insufficient.
Credit: security@apache.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apache NiFi | <=0.7.3 | |
| Apache NiFi | =1.0.0 | |
| Apache NiFi | =1.0.1 | |
| Apache NiFi | =1.1.0 | |
| Apache NiFi | =1.1.1 | |
| Apache NiFi | =1.1.2 | |
| Apache NiFi | =1.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/apache
- canonical/apache nifi
- version/apache nifi/0.7.3
- version/apache nifi/1.0.0
- version/apache nifi/1.0.1
- version/apache nifi/1.1.0
- version/apache nifi/1.1.1
- version/apache nifi/1.1.2
- version/apache nifi/1.2.0