CVE-2016-8748

In Apache NiFi before 1.0.1 and 1.1.x before 1.1.1, there is a cross-site scripting vulnerability in connection details dialog when accessed by an authorized…

published October 19, 2017

CVSS
—
EPSS
2%
Percentile
80.4
In the wild
Unconfirmed
What it is

In Apache NiFi before 1.0.1 and 1.1.x before 1.1.1, there is a cross-site scripting vulnerability in connection details dialog when accessed by an authorized user. The user supplied text was not being properly handled when added to the DOM.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01994 · 80.4th percentile
Published
2017-10-19T20:00Z
EPSS history
Timeline
  • 19 OCT 20:00Z
    In Apache NiFi before 1.0.1 and 1.1.x before 1.1.1, there is a cross-site scripting vulnerability in connection details dialog when accessed by an authorized…
    cvelistv5