description: In Apache NiFi before 0.7.4 and 1.x before 1.3.0, there are certain user input components in the UI which had been guarding for some forms of XSS issues but were insufficient.
problem types: Information Disclosure
affected:
{
product: Apache NiFi
vendor: Apache Software Foundation
versions:
status: affected, version: 0.0.1 to 0.7.3
status: affected, version: 1.0.0 to 1.2.0
}