Cross-site Scripting in Apache NiFi

2022-05-1702:40:53

Google

osv.dev

0.001 Low

EPSS

Percentile

30.5%

JSON

In Apache NiFi before 0.7.4 and 1.x before 1.3.0, there are certain user input components in the UI which had been guarding for some forms of XSS issues but were insufficient.

CPENameOperatorVersion
org.apache.nifi:nifieq0.4.0
org.apache.nifi:nifieq0.7.2
org.apache.nifi:nifieq1.0.0
org.apache.nifi:nifieq0.5.1
org.apache.nifi:nifieq0.7.1
org.apache.nifi:nifieq0.5.0
org.apache.nifi:nifieq1.1.1
org.apache.nifi:nifieq0.0.2-incubating
org.apache.nifi:nifieq1.1.0
org.apache.nifi:nifieq0.6.0

Name	Operator	Version
org.apache.nifi:nifi	eq	0.4.0
org.apache.nifi:nifi	eq	0.7.2
org.apache.nifi:nifi	eq	1.0.0
org.apache.nifi:nifi	eq	0.5.1
org.apache.nifi:nifi	eq	0.7.1
org.apache.nifi:nifi	eq	0.5.0
org.apache.nifi:nifi	eq	1.1.1
org.apache.nifi:nifi	eq	0.0.2-incubating
org.apache.nifi:nifi	eq	1.1.0
org.apache.nifi:nifi	eq	0.6.0