Search for packages
| purl | pkg:maven/org.apache.nifi/nifi@0.0.1-incubating |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4fnm-bxv8-vqhz
Aliases: CVE-2016-8748 GHSA-g2fm-x3cp-mqw9 |
Cross-site Scripting In Apache NiFi, there is a cross-site scripting vulnerability in connection details dialog when accessed by an authorized user. The user supplied text was not being properly handled when added to the DOM. |
Affected by 19 other vulnerabilities. Affected by 20 other vulnerabilities. |
|
VCID-bpqd-tx8f-kycf
Aliases: CVE-2022-29265 GHSA-wc97-7623-rxwx |
Improper Restriction of XML External Entity Reference Multiple components in Apache NiFi 0.0.1 to 1.16.0 do not restrict XML External Entity references in the default configuration. The Standard Content Viewer service attempts to resolve XML External Entity references when viewing formatted XML files. The following Processors attempt to resolve XML External Entity references when configured with default property values: - `EvaluateXPath` - `EvaluateXQuery` - `ValidateXml` Apache NiFi flow configurations that include these Processors is vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity references. The resolution disables Document Type Declarations in the default configuration for these Processors, and disallows XML External Entity resolution in standard services. |
Affected by 6 other vulnerabilities. |
|
VCID-j263-1hyr-t7hn
Aliases: CVE-2018-1310 GHSA-p76j-5v6v-6c22 |
Deserialization of Untrusted Data Apache NiFi JMS Deserialization issue because of ActiveMQ client vulnerability. Malicious JMS content could cause denial of service. |
Affected by 14 other vulnerabilities. |
|
VCID-k1bm-1u7b-vybp
Aliases: CVE-2017-12632 GHSA-w4x6-j349-9r57 |
Improper Input Validation A malicious host header in an incoming HTTP request could cause NiFi to load resources from an external server. |
Affected by 15 other vulnerabilities. |
|
VCID-r9su-47z6-x7cw
Aliases: CVE-2017-7667 GHSA-jvx9-rj3w-jq99 |
Origin Validation Error Apache NiFi needs to establish the response header telling browsers to only allow framing with the same origin. |
Affected by 8 other vulnerabilities. Affected by 19 other vulnerabilities. |
|
VCID-tnfn-2kzc-rugx
Aliases: CVE-2017-7665 GHSA-m5r7-w9v3-ghmx |
Cross-site Scripting There are certain user input components in the UI which had been guarding for some forms of XSS issues but were insufficient. |
Affected by 8 other vulnerabilities. Affected by 19 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||