Lucene search

CVE-2024-37389

🗓️ 08 Jul 2024 08:10:15Reported by apacheType

Apache NiFi cross-site scripting vulnerability in Parameter Contex

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 11
Cvelist	CVE-2024-37389 Apache NiFi: Improper Neutralization of Input in Parameter Context Description	8 Jul 202407:29	–	cvelist
CNVD	Unspecified Vulnerability in Apache NiFi (CNVD-2024-33176)	10 Jul 202400:00	–	cnvd
Vulnrichment	CVE-2024-37389 Apache NiFi: Improper Neutralization of Input in Parameter Context Description	8 Jul 202407:29	–	vulnrichment
Wolfi	CVE-2024-37389 vulnerabilities	8 Jul 202408:15	–	wolfi
Chainguard	CVE-2024-37389 vulnerabilities	8 Jul 202408:15	–	cgr
NVD	CVE-2024-37389	8 Jul 202408:15	–	nvd
OSV	CGA-8RR9-WW3C-5C97	25 Sep 202405:17	–	osv
OSV	CVE-2024-37389	8 Jul 202408:15	–	osv
OSV	GHSA-H658-QQV9-QWV8 Apache NiFi vulnerable to Cross-site Scripting	8 Jul 202409:32	–	osv
Veracode	Cross-Site Scripting (XSS)	9 Jul 202406:16	–	veracode

Nvd

Vulners

Node

apache nifiRange1.10.0–1.27.0

apache nifiMatch2.0.0milestone1

apache nifiMatch2.0.0milestone1-rc1

apache nifiMatch2.0.0milestone1-rc2

apache nifiMatch2.0.0milestone1-rc3

apache nifiMatch2.0.0milestone1-rc4

apache nifiMatch2.0.0milestone1-rc5

apache nifiMatch2.0.0milestone1-rc6

apache nifiMatch2.0.0milestone2

apache nifiMatch2.0.0milestone2-rc1

apache nifiMatch2.0.0milestone2-rc2

apache nifiMatch2.0.0milestone2-rc3

apache nifiMatch2.0.0milestone2-rc4

apache nifiMatch2.0.0milestone3

apache nifiMatch2.0.0milestone3-rc1

[
  {
    "defaultStatus": "unaffected",
    "packageName": "org.apache.nifi:nifi-web-ui",
    "product": "Apache NiFi",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "1.26.0",
        "status": "affected",
        "version": "1.10.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "2.0.0-M3",
        "status": "affected",
        "version": "2.0.0-M1",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread/yso9fr0wtff53nk046h1o83hdyb1lrxh
openwall	www.openwall.com/lists/oss-security/2024/07/08/1

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Jul 2024 08:15Current

4.8Medium risk

Vulners AI Score4.8

CVSS34.6 - 5.4

EPSS0.00106

SSVC

CWE-79