description: Apache NiFi before 0.7.4 and 1.x before 1.3.0 need to establish the response header telling browsers to only allow framing with the same origin.
problem types: Information Disclosure
affected:
{
product: Apache NiFi
vendor: Apache Software Foundation
versions:
status: affected, version: 0.0.1 to 0.7.3
status: affected, version: 1.0.0 to 1.2.0
}