Cross-site Scripting (XSS)

2017-06-1203:04:47

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

30.5%

JSON

nifi-web-ui is vulnerable to cross-site scripting (XSS) attacks. A malicious user can inject and execute arbitrary JavaScript due to the library insufficient validation on user input when creating SlickGrid tables

CPENameOperatorVersion
nifi-web-uile1.2.0
nifi-web-uile0.7.2
nifi-framework-corele1.2.0

Name	Operator	Version
nifi-web-ui	le	1.2.0
nifi-web-ui	le	0.7.2
nifi-framework-core	le	1.2.0

References

seclists.org/oss-sec/2017/q2/453

github.com/apache/nifi/pull/1818

issues.apache.org/jira/browse/NIFI-3906

0.001 Low

EPSS

Percentile

30.5%

JSON

Related for VERACODE:4414