GHSA-8XFC-GM6G-VGPV vulnerabilities

Vulnerabilities for packages: jruby, gradle, druid, sonarqube-10, bouncycastle-fips, keycloak, opensearch, elasticsearch, tez, ruby3.3-bouncy-castle-java, ruby3.2-bouncy-castle-java...

GHSA-8XFC-GM6G-VGPV vulnerabilities

Vulnerabilities for packages: sonarqube-10, ruby3.3-bouncy-castle-java, tez, keycloak, druid, ruby3.2-bouncy-castle-java, opensearch, jruby, gradle...

CVE-2024-30172 vulnerabilities

Vulnerabilities for packages: sonarqube-10, ruby3.3-bouncy-castle-java, keycloak, gradle-stage0, ruby3.2-bouncy-castle-java, opensearch, jruby, gradle...

CVE-2024-30172 vulnerabilities

Vulnerabilities for packages: jruby, gradle, gradle-stage0, sonarqube-10, keycloak, opensearch, elasticsearch, ruby3.3-bouncy-castle-java, ruby3.2-bouncy-castle-java...

CVE-2024-30171 vulnerabilities

Vulnerabilities for packages: sonarqube-10, ruby3.3-bouncy-castle-java, tez, keycloak, druid, ruby3.2-bouncy-castle-java, opensearch, jruby, gradle...

CVE-2024-30171 vulnerabilities

Vulnerabilities for packages: jruby, gradle, bouncycastle-tls-fips, druid, sonarqube-10, keycloak, opensearch, elasticsearch, tez, ruby3.3-bouncy-castle-java, ruby3.2-bouncy-castle-java...

CVE-2024-29857 vulnerabilities

Vulnerabilities for packages: jruby, gradle, druid, sonarqube-10, bouncycastle-fips, keycloak, opensearch, elasticsearch, tez, ruby3.3-bouncy-castle-java, ruby3.2-bouncy-castle-java...

CVE-2024-29857 vulnerabilities

Vulnerabilities for packages: sonarqube-10, ruby3.3-bouncy-castle-java, tez, keycloak, druid, ruby3.2-bouncy-castle-java, opensearch, jruby, gradle...

GHSA-4H8F-2WVX-GG5W vulnerabilities

Vulnerabilities for packages: sonarqube-10, ruby3.3-bouncy-castle-java, keycloak, druid, ruby3.2-bouncy-castle-java, opensearch, jruby, gradle...

GHSA-4H8F-2WVX-GG5W vulnerabilities

Vulnerabilities for packages: jruby, gradle, druid, sonarqube-10, keycloak, opensearch, elasticsearch, ruby3.3-bouncy-castle-java, ruby3.2-bouncy-castle-java...

CVE-2024-34447 vulnerabilities

Vulnerabilities for packages: sonarqube-10, ruby3.3-bouncy-castle-java, keycloak, druid, ruby3.2-bouncy-castle-java, opensearch, jruby, gradle...

CVE-2024-34447 vulnerabilities

Vulnerabilities for packages: jruby, gradle, druid, sonarqube-10, keycloak, opensearch, elasticsearch, ruby3.3-bouncy-castle-java, ruby3.2-bouncy-castle-java...

GHSA-6QVW-249J-H44C vulnerabilities

Vulnerabilities for packages: confluent-common-docker, confluent-kafka...

CVE-2023-51775 vulnerabilities

Vulnerabilities for packages: confluent-common-docker, confluent-kafka...

Apache NiFi cross-site scripting vulnerability (CNVD-2023-9665850)

Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation and system intermediary logic. Apache NiFi suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and...

Cross Site Scripting (XSS)

Apache NiFi is vulnerable to Cross Site Scripting XSS. The vulnerability is due to improper sanitization of user input. This issue can be exploited by an attacker via crafting specific malicious url to execute Javascript within the session context of the authenticated user...

Improper Neutralization of Input in Advanced User Interface for Jolt

Apache NiFi 0.7.0 through 1.23.2 include the JoltTransformJSON Processor, which provides an advanced configuration user interface that is vulnerable to DOM-based cross-site scripting. If an authenticated user, who is authorized to configure a JoltTransformJSON Processor, visits a crafted URL, the...

GHSA-68PR-6FJC-WMGM Improper Neutralization of Input in Advanced User Interface for Jolt

Apache NiFi 0.7.0 through 1.23.2 include the JoltTransformJSON Processor, which provides an advanced configuration user interface that is vulnerable to DOM-based cross-site scripting. If an authenticated user, who is authorized to configure a JoltTransformJSON Processor, visits a crafted URL, the...

CVE-2023-49145

Apache NiFi 0.7.0 through 1.23.2 include the JoltTransformJSON Processor, which provides an advanced configuration user interface that is vulnerable to DOM-based cross-site scripting. If an authenticated user, who is authorized to configure a JoltTransformJSON Processor, visits a crafted URL, the...

Cross site scripting

Apache NiFi 0.7.0 through 1.23.2 include the JoltTransformJSON Processor, which provides an advanced configuration user interface that is vulnerable to DOM-based cross-site scripting. If an authenticated user, who is authorized to configure a JoltTransformJSON Processor, visits a crafted URL, the...