Lucene search
ApacheCVELIST:CVE-2016-8748HistoryOct 19, 2017 - 8:00 p.m.
CVE-2016-8748
2017-10-1920:00:00
apache
www.cve.org
6
EPSS
0.001
Percentile
28.4%
In Apache NiFi before 1.0.1 and 1.1.x before 1.1.1, there is a cross-site scripting vulnerability in connection details dialog when accessed by an authorized user. The user supplied text was not being properly handled when added to the DOM.
CNA Affected
[
{
"product": "Apache NiFi",
"vendor": "Apache Software Foundation",
"versions": [
{
"status": "affected",
"version": "1.0.0"
},
{
"status": "affected",
"version": "1.1.0"
}
]
}
]Related
nvd
nvd
CVE-2016-8748
2017-10-19 20:29:00
osv
osv
Cross-site Scripting in Apache NiFi
2022-05-14 01:05:57
CVE-2016-8748
2017-10-19 20:29:00
cve
cve
CVE-2016-8748
2017-10-19 20:29:00
github
github
Cross-site Scripting in Apache NiFi
2022-05-14 01:05:57
veracode
veracode
Cross-site Scripting (XSS)
2017-01-17 05:57:56
prion
prion
Cross site scripting
2017-10-19 20:29:00
zdt
zdt
Apache NiFi 1.0.0 / 1.1.0 Cross Site Scripting Vulnerability
2017-01-17 00:00:00