CVE-2017-7665

2017-06-1216:00:00

apache

www.cve.org

0.001 Low

EPSS

Percentile

30.5%

JSON

In Apache NiFi before 0.7.4 and 1.x before 1.3.0, there are certain user input components in the UI which had been guarding for some forms of XSS issues but were insufficient.

CNA Affected

[
  {
    "product": "Apache NiFi",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "0.0.1 to 0.7.3"
      },
      {
        "status": "affected",
        "version": "1.0.0 to 1.2.0"
      }
    ]
  }
]