PT-2017-17871 · Apache · Apache Nifi

CVE-2017-7665

·

Publicado

2017-06-12

·

Atualizado

2022-05-17

CVSS v3.1

6.1

Média

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Apache NiFi versions prior to 0.7.4 Apache NiFi versions 1.x prior to 1.3.0
Description The issue arises from insufficient guarding of certain user input components in the UI, which can lead to XSS issues.
Recommendations For Apache NiFi versions prior to 0.7.4, update to version 0.7.4 or later. For Apache NiFi versions 1.x prior to 1.3.0, update to version 1.3.0 or later.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-7665
GHSA-M5R7-W9V3-GHMX

Produtos afetados

Apache Nifi