711 matches found
GHSA-H658-QQV9-QWV8 Apache NiFi vulnerable to Cross-site Scripting
Apache NiFi 1.10.0 through 1.26.0 and 2.0.0-M1 through 2.0.0-M3 support a description field in the Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, which the client...
GHSA-H658-QQV9-QWV8 vulnerabilities
Vulnerabilities for packages: apache-nifi...
CVE-2024-37389
Apache NiFi 1.10.0 through 1.26.0 and 2.0.0-M1 through 2.0.0-M3 support a description field in the Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, which the client...
CVE-2024-37389 vulnerabilities
Vulnerabilities for packages: apache-nifi...
CVE-2024-37389 vulnerabilities
Vulnerabilities for packages: apache-nifi...
CVE-2024-37389 Apache NiFi: Improper Neutralization of Input in Parameter Context Description
Apache NiFi 1.10.0 through 1.26.0 and 2.0.0-M1 through 2.0.0-M3 support a description field in the Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, which the client...
CVE-2024-37389
The CVE-2024-37389 entry affects Apache NiFi versions 1.10.0–1.26.0 and 2.0.0-M1–2.0.0-M3, where the Parameter Context description field is vulnerable to cross-site scripting. An authenticated user with Parameter Context configuration rights can input arbitrary JavaScript code that the browser ex...
CVE-2024-37389 Apache NiFi: Improper Neutralization of Input in Parameter Context Description
Apache NiFi 1.10.0 through 1.26.0 and 2.0.0-M1 through 2.0.0-M3 support a description field in the Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, which the client...
CVE-2024-37389 Apache NiFi: Improper Neutralization of Input in Parameter Context Description
Apache NiFi 1.10.0 through 1.26.0 and 2.0.0-M1 through 2.0.0-M3 support a description field in the Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, which the client...
Apache NiFi 安全漏洞
Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation and system intermediary logic. Apache NiFi has a security vulnerability that stems from susceptibility to cross-site scripting attacks. An...
GHSA-8WH2-6QHJ-H7J9 vulnerabilities
Vulnerabilities for packages: apache-nifi...
GHSA-8WH2-6QHJ-H7J9 vulnerabilities
Vulnerabilities for packages: apache-nifi...
CVE-2024-36124 vulnerabilities
Vulnerabilities for packages: apache-nifi...
CVE-2024-36124 vulnerabilities
Vulnerabilities for packages: apache-nifi...
GHSA-973X-65J7-XCF4 vulnerabilities
Vulnerabilities for packages: druid, trino, spark, apache-nifi...
CVE-2024-36114 vulnerabilities
Vulnerabilities for packages: druid, trino, spark, apache-nifi...
GHSA-M44J-CFRM-G8QC vulnerabilities
Vulnerabilities for packages: keycloak, ruby3.3-bouncy-castle-java, ruby3.2-bouncy-castle-java, opensearch, sonarqube-10, gradle-stage0, gradle, jruby...
GHSA-V435-XC8X-WVR9 vulnerabilities
Vulnerabilities for packages: keycloak, ruby3.3-bouncy-castle-java, druid, opensearch, ruby3.2-bouncy-castle-java, sonarqube-10, tez, gradle, jruby...