Vulners
Lucene search
Apache NiFi 1.0.0 / 1.1.0 Cross Site Scripting Vulnerability
| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
 | Apache NiFi Cross-Site Scripting Vulnerability | 20 Jan 201700:00 | – | cnvd |
 | CVE-2016-8748 | 19 Oct 201720:00 | – | cve |
 | CVE-2016-8748 | 19 Oct 201720:00 | – | cvelist |
 | EUVD-2022-3860 | 3 Oct 202520:07 | – | euvd |
 | Cross-site Scripting in Apache NiFi | 14 May 202201:05 | – | github |
 | CVE-2016-8748 | 19 Oct 201720:29 | – | nvd |
 | CVE-2016-8748 | 19 Oct 201720:29 | – | osv |
| GHSA-G2FM-X3CP-MQW9 Cross-site Scripting in Apache NiFi | 14 May 202201:05 | – | osv |
 | Cross site scripting | 19 Oct 201720:29 | – | prion |
 | Cross-site Scripting (XSS) | 17 Jan 201705:57 | – | veracode |
10
CVE-2016-8748: Apache NiFi XSS vulnerability in connection details dialogue
Severity: Moderate
Vendor: The Apache Software Foundation
Versions Affected:
Apache NiFi 1.0.0
Apache NiFi 1.1.0
Description: There is a cross-site scripting vulnerability in
connection details dialog when accessed by an authorized user. The
user supplied text was not be properly handled when added to the DOM.
Mitigation:
1.0.0 users should upgrade to 1.0.1 or 1.1.1.
1.1.0 users should upgrade to 1.1.1. Additional migration guidance
can be found https://cwiki.apache.org/confluence/display/NIFI/Migration+Guidance.
Credit: This issue was discovered by Matt Gilman of the Apache NiFi
PMC during a code review.
References: https://nifi.apache.org/security.html
# 0day.today [2018-01-05] #Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jan 2017 00:00Current
7.1High risk
Vulners AI Score7.1
EPSS0.00406