GHSA-9CMQ-M9J5-MVWW vulnerabilities

Vulnerabilities for packages: apache-nifi...

CVE-2024-38808 vulnerabilities

Vulnerabilities for packages: apache-nifi...

GHSA-CFXW-4H78-H7FW vulnerabilities

Vulnerabilities for packages: celeborn, hadoop-client-modules, tez, druid, apache-nifi...

GHSA-CFXW-4H78-H7FW vulnerabilities

Vulnerabilities for packages: tez, celeborn, apache-nifi...

CVE-2024-25638 vulnerabilities

Vulnerabilities for packages: celeborn, hadoop-client-modules, tez, druid, apache-nifi...

CVE-2024-25638 vulnerabilities

Vulnerabilities for packages: tez, celeborn, apache-nifi...

Unspecified Vulnerability in Apache NiFi (CNVD-2024-33176)

Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation and system intermediary logic. Apache NiFi has a security vulnerability that stems from susceptibility to cross-site scripting attacks. An...

org.apache.nifi:nifi-framework-nar (>=1.1.0 <=1.12.1), org.apache.nifi:nifi-jetty (>=1.1.0 <=1.15.3) +2 more potentially affected by CVE-2024-37389 via org.apache.nifi:nifi-web-ui (>=1.10.0 <=1.26.0)

org.apache.nifi:nifi-web-ui MAVEN version =1.10.0, =1.1.0, =1.1.0, =1.13.0, =1.11.0, =1.26.0 Source cves: CVE-2024-37389 Source advisory: OSV:GHSA-H658-QQV9-QWV8...

GHSA-H658-QQV9-QWV8 vulnerabilities

Vulnerabilities for packages: apache-nifi...

GHSA-H658-QQV9-QWV8 vulnerabilities

Vulnerabilities for packages: apache-nifi...

GHSA-H658-QQV9-QWV8 Apache NiFi vulnerable to Cross-site Scripting

Apache NiFi 1.10.0 through 1.26.0 and 2.0.0-M1 through 2.0.0-M3 support a description field in the Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, which the client...

Apache NiFi vulnerable to Cross-site Scripting

Apache NiFi 1.10.0 through 1.26.0 and 2.0.0-M1 through 2.0.0-M3 support a description field in the Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, which the client...

CVE-2024-37389 vulnerabilities

Vulnerabilities for packages: apache-nifi...

CVE-2024-37389 vulnerabilities

Vulnerabilities for packages: apache-nifi...

CVE-2024-37389

Apache NiFi 1.10.0 through 1.26.0 and 2.0.0-M1 through 2.0.0-M3 support a description field in the Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, which the client...

CVE-2024-37389 Apache NiFi: Improper Neutralization of Input in Parameter Context Description

Apache NiFi 1.10.0 through 1.26.0 and 2.0.0-M1 through 2.0.0-M3 support a description field in the Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, which the client...

CVE-2024-37389

The CVE-2024-37389 entry affects Apache NiFi versions 1.10.0–1.26.0 and 2.0.0-M1–2.0.0-M3, where the Parameter Context description field is vulnerable to cross-site scripting. An authenticated user with Parameter Context configuration rights can input arbitrary JavaScript code that the browser ex...

CVE-2024-37389 Apache NiFi: Improper Neutralization of Input in Parameter Context Description

Apache NiFi 1.10.0 through 1.26.0 and 2.0.0-M1 through 2.0.0-M3 support a description field in the Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, which the client...

CVE-2024-37389 Apache NiFi: Improper Neutralization of Input in Parameter Context Description

Apache NiFi 1.10.0 through 1.26.0 and 2.0.0-M1 through 2.0.0-M3 support a description field in the Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, which the client...

Apache NiFi 安全漏洞

Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation and system intermediary logic. Apache NiFi has a security vulnerability that stems from susceptibility to cross-site scripting attacks. An...