External Resource Load

nifi-jetty is vulnerable to malicious external resource loads. Using a malicious HOST header, attackers can load malicious resources from external sources...

Cross-site Scripting (XSS)

nifi-jetty is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary JavaScript because the library does have the sufficient response headers to only allow framing from the same origin...