CVE-2020-1933

6.1MEDIUM

Key Information:

Vendor
Apache
Status
Apache Nifi
Vendor
CVE Published:
28 January 2020

Summary

A XSS vulnerability was found in Apache NiFi 1.0.0 to 1.10.0. Malicious scripts could be injected to the UI through action by an unaware authenticated user in Firefox. Did not appear to occur in other browsers.

Affected Version(s)

Apache NiFi Apache NiFi 1.0.0 to 1.10.0

References

https://nifi.apache.org/security.html#CVE-2020-1933
x_refsource_CONFIRM

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.