CVE-2016-8748 in NiFi信息

摘要

由 MITRE

In Apache NiFi before 1.0.1 and 1.1.x before 1.1.1, there is a cross-site scripting vulnerability in connection details dialog when accessed by an authorized user. The user supplied text was not being properly handled when added to the DOM.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2016-10-18

披露

2017-10-19

管理

已接受

条目

VDB-95455

CPE

准备好

CWE

CWE-79 (已确认)

CVSS

5.4 (NVD)

EPSS

0.00406

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2016-8748
NVD	https://nvd.nist.gov/vuln/detail/CVE-2016-8748
CVE Details	https://www.cvedetails.com/cve/CVE-2016-8748/

◂ 上一步一览下一步 ▸

Do you know our Splunk app?

Download it now for free!