What is GHSA-m5r7-w9v3-ghmx?

GHSA-m5r7-w9v3-ghmx is a security advisory published by GitHub Security Advisories with Medium severity. Cross-site Scripting in Apache NiFi

Which CVE IDs does GHSA-m5r7-w9v3-ghmx cover?

GHSA-m5r7-w9v3-ghmx covers the following CVE IDs: CVE-2017-7665. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-m5r7-w9v3-ghmx?

GHSA-m5r7-w9v3-ghmx has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-m5r7-w9v3-ghmx?

GHSA-m5r7-w9v3-ghmx affects 2 products, including: maven/org.apache.nifi:nifi:\u003c 0.7.4; maven/org.apache.nifi:nifi:\u003e= 1.0.0, \u003c 1.3.0.

GHSA-m5r7-w9v3-ghmxMediumCVSS 6.1

Cross-site Scripting in Apache NiFi

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

January 30, 2023

🔗 CVE IDs covered (1)

CVE-2017-7665 →

📋 Description

In Apache NiFi before 0.7.4 and 1.x before 1.3.0, there are certain user input components in the UI which had been guarding for some forms of XSS issues but were insufficient.

🎯 Affected products2

maven/org.apache.nifi:nifi:< 0.7.4
maven/org.apache.nifi:nifi:>= 1.0.0, < 1.3.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2017-7665
https://lists.apache.org/thread.html/d779d6129de1a5aa149c219b2fc6e9e78156614eaac92a89cbaf9bce@%3Cdev.nifi.apache.org%3E
http://www.securityfocus.com/bid/99009
https://github.com/advisories/GHSA-m5r7-w9v3-ghmx