877 matches found
GHSA-CFXW-4H78-H7FW vulnerabilities
Vulnerabilities for packages: druid, apache-nifi, tez, celeborn...
CVE-2024-25638 vulnerabilities
Vulnerabilities for packages: druid, apache-nifi, tez, celeborn...
CVE-2024-25638 vulnerabilities
Vulnerabilities for packages: celeborn, druid, hadoop-client-modules, tez, apache-nifi...
Unspecified Vulnerability in Apache NiFi (CNVD-2024-33176)
Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation and system intermediary logic. Apache NiFi has a security vulnerability that stems from susceptibility to cross-site scripting attacks. An...
GHSA-H658-QQV9-QWV8 vulnerabilities
Vulnerabilities for packages: apache-nifi...
Apache NiFi vulnerable to Cross-site Scripting
Apache NiFi 1.10.0 through 1.26.0 and 2.0.0-M1 through 2.0.0-M3 support a description field in the Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, which the client...
GHSA-H658-QQV9-QWV8 vulnerabilities
Vulnerabilities for packages: apache-nifi...
GHSA-H658-QQV9-QWV8 Apache NiFi vulnerable to Cross-site Scripting
Apache NiFi 1.10.0 through 1.26.0 and 2.0.0-M1 through 2.0.0-M3 support a description field in the Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, which the client...
CVE-2024-37389
Apache NiFi 1.10.0 through 1.26.0 and 2.0.0-M1 through 2.0.0-M3 support a description field in the Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, which the client...
CVE-2024-37389 vulnerabilities
Vulnerabilities for packages: apache-nifi...
CVE-2024-37389 vulnerabilities
Vulnerabilities for packages: apache-nifi...
CVE-2024-37389
The CVE-2024-37389 entry affects Apache NiFi versions 1.10.0–1.26.0 and 2.0.0-M1–2.0.0-M3, where the Parameter Context description field is vulnerable to cross-site scripting. An authenticated user with Parameter Context configuration rights can input arbitrary JavaScript code that the browser ex...
CVE-2024-37389 Apache NiFi: Improper Neutralization of Input in Parameter Context Description
Apache NiFi 1.10.0 through 1.26.0 and 2.0.0-M1 through 2.0.0-M3 support a description field in the Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, which the client...
CVE-2024-37389 Apache NiFi: Improper Neutralization of Input in Parameter Context Description
Apache NiFi 1.10.0 through 1.26.0 and 2.0.0-M1 through 2.0.0-M3 support a description field in the Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, which the client...
CVE-2024-37389 Apache NiFi: Improper Neutralization of Input in Parameter Context Description
Apache NiFi 1.10.0 through 1.26.0 and 2.0.0-M1 through 2.0.0-M3 support a description field in the Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, which the client...
Apache NiFi 安全漏洞
Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation and system intermediary logic. Apache NiFi has a security vulnerability that stems from susceptibility to cross-site scripting attacks. An...
GHSA-8WH2-6QHJ-H7J9 vulnerabilities
Vulnerabilities for packages: apache-nifi...
GHSA-8WH2-6QHJ-H7J9 vulnerabilities
Vulnerabilities for packages: apache-nifi...