Cross site request forgery (csrf)

2017-10-1920:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

40.5%

JSON

In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, if an anonymous user request is replicated to another node, the originating node identity is used rather than the “anonymous” user.

CPENameOperatorVersion
nifieq1.1.0
nifieq1.1.1
nifieq0.7.1
nifieq0.7.0

Name	Operator	Version
nifi	eq	1.1.0
nifi	eq	1.1.1
nifi	eq	0.7.1
nifi	eq	0.7.0

References

www.securityfocus.com/bid/96730

nifi.apache.org/security.html

0.001 Low

EPSS

Percentile

40.5%

JSON

Related for PRION:CVE-2017-5635