CVE-2020-1933

2020-01-2801:15:12

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.8%

JSON

A XSS vulnerability was found in Apache NiFi 1.0.0 to 1.10.0. Malicious scripts could be injected to the UI through action by an unaware authenticated user in Firefox. Did not appear to occur in other browsers.

CPENameOperatorVersion
nifieqrel/nifi-1.7.0
nifieqrel/nifi-1.5.0
nifieqrel/nifi-1.3.0
nifieqrel/nifi-1.8.0
nifieqrel/nifi-1.4.0
nifieqnifi-1.8.0-RC3
nifieqnifi-1.7.0-RC1
nifieqnifi-1.6.0-RC3
nifieqnifi-1.2.0-RC2
nifieqrel/nifi-1.0.0

Name	Operator	Version
nifi	eq	rel/nifi-1.7.0
nifi	eq	rel/nifi-1.5.0
nifi	eq	rel/nifi-1.3.0
nifi	eq	rel/nifi-1.8.0
nifi	eq	rel/nifi-1.4.0
nifi	eq	nifi-1.8.0-RC3
nifi	eq	nifi-1.7.0-RC1
nifi	eq	nifi-1.6.0-RC3
nifi	eq	nifi-1.2.0-RC2
nifi	eq	rel/nifi-1.0.0