Apache NiFi Remote Code Injection Vulnerability

Apache NiFi is an automated solution for data transfer between systems. Apache NiFi suffers from a remote code injection vulnerability. An attacker can exploit this vulnerability to execute arbitrary code in the context of a user running in an affected application, with a failed attack resulting ...

Unauthorized Access Via User Impersonation

Apache nifi is vulnerable to unauthorized access via user impersonation attacks. The vulnerability exists due to a possible injection attack in a cluster environment, in the proxy chain's serialization/deserialization. A malicious user can inject in their username to impersonate another user to...

Unauthorized Data Access In Cluster

Apache nifi is vulnerable to unauthorized data accesses. The vulnerability exists in a cluster environment when an anonymous user request is replicated to another node. The replicated node identity will contain the originating node identity instead of the anonymous user's identity...

Apache NiFi Cross-Site Scripting Vulnerability

Apache NiFi is an automated solution for data transfer between systems. Apache NiFi suffers from a cross-site scripting vulnerability in the connection details dialog box, which allows an attacker to inject malicious code into the affected site...

Cross-site Scripting (XSS)

Apache Nifi is vulnerable to cross-site scripting XSS vulnerability in connection details dialog when accessed by an authorized user. It does not properly handle the user supplied text when added to the DOM...

Apache NiFi 1.0.0 / 1.1.0 Cross Site Scripting Vulnerability

Exploit for multiple platform in category web applications CVE-2016-8748: Apache NiFi XSS vulnerability in connection details dialogue Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Apache NiFi 1.0.0 Apache NiFi 1.1.0 Description: There is a cross-site scripting...