Lucene search
Veracode Vulnerability DatabaseVERACODE:8052HistoryDec 20, 2018 - 4:20 a.m.
Cross-site Request Forgery (CSRF)
2018-12-2004:20:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.0004 Low
EPSS
Percentile
15.8%
nifi-web-api is vulnerable to cross-site request forgery (CSRF) attacks. The vulnerability exists due to the lack of Cross-Origin Resource Sharing (CORS) filter applied to the template/upload endpoint, allowing requests from different domains in the origin to be accepted.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nifi-web-api | le | 1.7.1 |
Related
cve
cve
CVE-2018-17195
2018-12-19 14:29:00
osv
osv
Cleartext Transmission of Sensitive Information in Apache nifi
2018-12-20 22:02:45
CVE-2018-17195
2018-12-19 14:29:00
github
github
Cleartext Transmission of Sensitive Information in Apache nifi
2018-12-20 22:02:45
nvd
nvd
CVE-2018-17195
2018-12-19 14:29:00
prion
prion
Cross site request forgery (csrf)
2018-12-19 14:29:00
cvelist
cvelist
CVE-2018-17195
2018-12-19 14:00:00