Lucene search
GoogleOSV:GHSA-29PH-FJF3-C5CMHistoryMay 14, 2022 - 3:45 a.m.
Apache NiFi XSS issue in context path handling
2022-05-1403:45:22
Google
osv.dev
7
0.009 Low
EPSS
Percentile
82.3%
A malicious X-ProxyContextPath or X-Forwarded-Context header containing external resources or embedded code could cause remote code execution. The fix to properly handle these headers was applied on the Apache NiFi 1.5.0 release. Users running a prior 1.x release should upgrade to the appropriate release.
Related
osv
osv
CVE-2017-15697
2018-01-23 22:29:00
nvd
nvd
CVE-2017-15697
2018-01-23 22:29:00
veracode
veracode
Remote Code Execution (RCE)
2018-01-24 03:06:19
cve
cve
CVE-2017-15697
2018-01-23 22:29:00
github
github
Apache NiFi XSS issue in context path handling
2022-05-14 03:45:22
prion
prion
Remote code execution
2018-01-23 22:29:00
cvelist
cvelist
CVE-2017-15697
2018-01-12 00:00:00