CVE-2017-7665

2017-06-1216:29:00

Google

osv.dev

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.5%

JSON

In Apache NiFi before 0.7.4 and 1.x before 1.3.0, there are certain user input components in the UI which had been guarding for some forms of XSS issues but were insufficient.

CPENameOperatorVersion
nifieqnifi-0.1.0-incubating-rc13
nifieqnifi-nar-maven-plugin-1.0.0-incubating-RC3
nifieqnifi-0.0.1-incubating-RC3
nifieqnifi-1.1.0-RC2
nifieqnifi-0.4.0
nifieqrel/nifi-1.0.0
nifieqnifi-0.6.0
nifieqnifi-0.2.0-incubating-RC1
nifieqrel/nifi-0.7.1
nifieqnifi-1.0.0-RC1

Name	Operator	Version
nifi	eq	nifi-0.1.0-incubating-rc13
nifi	eq	nifi-nar-maven-plugin-1.0.0-incubating-RC3
nifi	eq	nifi-0.0.1-incubating-RC3
nifi	eq	nifi-1.1.0-RC2
nifi	eq	nifi-0.4.0
nifi	eq	rel/nifi-1.0.0
nifi	eq	nifi-0.6.0
nifi	eq	nifi-0.2.0-incubating-RC1
nifi	eq	rel/nifi-0.7.1
nifi	eq	nifi-1.0.0-RC1