PT-2017-17871

Name of the Vulnerable Software and Affected Versions Apache NiFi versions prior to 0.7.4 Apache NiFi versions 1.x prior to 1.3.0 Description The issue arises from insufficient guarding of certain user input components in the UI, which can lead to XSS issues. Recommendations For Apache NiFi...

CVE-2017-7665: Improper Neutralization of Input During Web Page Generation

In Apache NiFi before 0.7.4 and 1.x before 1.3.0, there are certain user input components in the UI which had been guarding for some forms of XSS issues but were insufficient...