CVE-2017-7665

In Apache NiFi before 0.7.4 and 1.x before 1.3.0, there are certain user input components in the UI which had been guarding for some forms of XSS issues but were insufficient.

Score

CVSS 3.0 6.1 Medium

Status

Modified - security@apache.org

Published

2017-06-12

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Nifi (Apache)
• Apache Nifi (Apache Software Foundation)

References

• http://www.securityfocus.com/bid/99009
• https://lists.apache.org/thread.html/d779d6129de1a5aa149c219b2fc6e9e78156614eaac92a89cbaf9bce%40%3Cdev.nifi.apache.org%…