org.apache.nifi:nifi-web-api vulnerabilities

Published: 10 years ago Last updated: 24 days ago Latest version: 2.7.2 Latest non-vulnerable version: 2.7.2

License

Apache-2.0[0.0.1-incubating,);

Known vulnerabilities in the org.apache.nifi:nifi-web-api package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
L Missing Authorization	[1.10.0,2.1.0)
M Cross-site Scripting (XSS)	[1.0.0,1.11.0)
M Information Exposure	[1.0.0,1.11.0)
M Information Exposure	[1.3.0,1.10.0)
C Session Fixation	[1.0.0,1.10.0)
M Cross-site Request Forgery (CSRF)	[1.0.0,1.8.0)
M Deserialization of Untrusted Data	[,1.4.0)

84 VERSIONS IN TOTAL See all versions