GHSA-2X2G-32R7-P4X8 vulnerabilities

Vulnerabilities for packages: thingsboard, apache-nifi, druid, strimzi-kafka-operator, prometheus-jmx-exporter, logstash...

CVE-2024-31141 vulnerabilities

Vulnerabilities for packages: thingsboard, apache-nifi, druid, strimzi-kafka-operator, prometheus-jmx-exporter, logstash...

Apache NiFi Cross-site Scripting vulnerability

Apache NiFi 1.10.0 through 1.27.0 and 2.0.0-M1 through 2.0.0-M3 support a description field for Parameters in a Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, whic...

GHSA-7MQJ-XGF8-P59V Apache NiFi Cross-site Scripting vulnerability

Apache NiFi 1.10.0 through 1.27.0 and 2.0.0-M1 through 2.0.0-M3 support a description field for Parameters in a Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, whic...

CVE-2024-45477

Apache NiFi 1.10.0 through 1.27.0 and 2.0.0-M1 through 2.0.0-M3 support a description field for Parameters in a Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, whic...

CVE-2024-45477 Apache NiFi: Improper Neutralization of Input in Parameter Description

Apache NiFi 1.10.0 through 1.27.0 and 2.0.0-M1 through 2.0.0-M3 support a description field for Parameters in a Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, whic...

CVE-2024-45477 Apache NiFi: Improper Neutralization of Input in Parameter Description

Apache NiFi 1.10.0 through 1.27.0 and 2.0.0-M1 through 2.0.0-M3 support a description field for Parameters in a Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, whic...

CVE-2024-45477

Apache NiFi is affected by CVE-2024-45477 due to improper neutralization of input in the Parameter Context description field. The vulnerability exists in NiFi versions 1.10.0–1.27.0 and 2.0.0-M1–2.0.0-M3, where an authenticated user with permission to configure a Parameter Context can inject arbi...

CVE-2024-45477 Apache NiFi: Improper Neutralization of Input in Parameter Description

Apache NiFi 1.10.0 through 1.27.0 and 2.0.0-M1 through 2.0.0-M3 support a description field for Parameters in a Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, whic...

Apache NiFi 跨站脚本漏洞

Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation, and system brokering logic. A cross-site scripting vulnerability exists in Apache NiFi versions 1.10.0 through 1.27.0 and 2.0.0-M1 through...

GHSA-C4Q5-6C82-3QPW vulnerabilities

Vulnerabilities for packages: thingsboard, apache-nifi...

GHSA-C4Q5-6C82-3QPW vulnerabilities

Vulnerabilities for packages: thingsboard, apache-nifi...

CVE-2024-38821 vulnerabilities

Vulnerabilities for packages: thingsboard, apache-nifi...

CVE-2024-38821 vulnerabilities

Vulnerabilities for packages: thingsboard, apache-nifi...

GHSA-4GC7-5J7H-4QPH vulnerabilities

Vulnerabilities for packages: thingsboard, apache-nifi, kayenta-fips, kayenta...

GHSA-4GC7-5J7H-4QPH vulnerabilities

Vulnerabilities for packages: thingsboard, apache-nifi...

CVE-2024-38820 vulnerabilities

Vulnerabilities for packages: thingsboard, apache-nifi, kayenta-fips, kayenta...

CVE-2024-38820 vulnerabilities

Vulnerabilities for packages: thingsboard, apache-nifi...

GHSA-QH8G-58PP-2WXH vulnerabilities

Vulnerabilities for packages: solr, apache-nifi, akhq, confluent-kafka, cassandra-reaper, cloudwatch-exporter...

GHSA-QH8G-58PP-2WXH vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator-fips, celeborn, akhq, wso2is, clojure-tools, apache-nifi, cloudwatch-exporter, zookeeper-fips, spark, spark-kubernetes-operator, apache-pulsar-fips, zaproxy, spark-fips, spark-kubernetes-operator-fips, solr, neo4j, pinot-fips, pinot,...