1.28.1
10 years ago
11 months ago
Known vulnerabilities in the org.apache.nifi:nifi-web-ui package. This does not include vulnerabilities belonging to this package’s dependencies.
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for freeVulnerability | Vulnerable Version |
---|---|
org.apache.nifi:nifi-web-ui is a system to process and distribute data. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) in the connection details dialog when accessed by an authorized user. The user supplied text is not being properly handled when added to the DOM. How to fix Cross-site Scripting (XSS)? Upgrade | [,1.0.1)[1.1.0,1.1.1) |