Lucene search
PRIOn knowledge basePRION:CVE-2023-49145HistoryNov 27, 2023 - 11:15 p.m.
Cross site scripting
2023-11-2723:15:00
PRIOn knowledge base
www.prio-n.com
2
cross site scripting
apache nifi
jolttransformjson processor
vulnerability
dom-based
authenticated user
javascript code
mitigation
nvd
Apache NiFi 0.7.0 through 1.23.2 include the JoltTransformJSON Processor, which provides an advanced configuration user interface that is vulnerable to DOM-based cross-site scripting. If an authenticated user, who is authorized to configure a JoltTransformJSON Processor, visits a crafted URL, then arbitrary
JavaScript code can be executed within the session context of the authenticated user. Upgrading to Apache NiFi 1.24.0 or 2.0.0-M1 is the recommended mitigation.
Related
cve
cve
CVE-2023-49145
2023-11-27 23:15:07
nvd
nvd
CVE-2023-49145
2023-11-27 23:15:07
github
github
Improper Neutralization of Input in Advanced User Interface for Jolt
2023-11-28 00:30:33
osv
osv
Improper Neutralization of Input in Advanced User Interface for Jolt
2023-11-28 00:30:33
CVE-2023-49145
2023-11-27 23:15:07
cvelist
cvelist
veracode
veracode
Cross Site Scripting (XSS)
2023-11-29 07:40:16
cnvd
cnvd
Apache NiFi cross-site scripting vulnerability (CNVD-2023-9665850)
2023-11-30 00:00:00