GitHub Advisoryadvisory · Maven

GHSA-pqhq-xx62-2v2p Cross-site scripting in Apache NiFi

MEDIUM Published 2022-01-06 Modified 2021-03-26 Official page ↗
Aliases
CVE-2020-1933
Ecosystem
Maven
Packages
org.apache.nifi:nifi
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2021-03-26

Affected packages

• Maven org.apache.nifi:nifi: >= 1.0.0, < 1.11.0 → fixed in 1.11.0

Description

A XSS vulnerability was found in Apache NiFi 1.0.0 to 1.10.0. Malicious scripts could be injected to the UI through action by an unaware authenticated user in Firefox. Did not appear to occur in other browsers.

Related

Alias · CVE (1)

  • CVE-2020-1933 A XSS vulnerability was found in Apache NiFi 1.0.0 to 1.10.0. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References