Beveiligingsadvies

CVE-2016-8748

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-10-19 20:00:00
Laatst bijgewerkt 2024-09-17 04:05:08
Toegewezen door apache
CVSS-score geen score
Status PUBLISHED

Beschrijving

In Apache NiFi before 1.0.1 and 1.1.x before 1.1.1, there is a cross-site scripting vulnerability in connection details dialog when accessed by an authorized user. The user supplied text was not being properly handled when added to the DOM.