Package · Maven

org.apache.nifi:nifi-jolt-transform-json-ui

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.9

CVE-2023-49145

Apache NiFi: Improper Neutralization of Input in Advanced User Interface for Jolt

Apache NiFi 0.7.0 through 1.23.2 include the JoltTransformJSON Processor, which provides an advanced configuration user interface that is vulnerable to DOM-based cross-site scripting. If an authenticated user, who is authorized to configure a JoltTransformJSO…

Apache Software Foundation Apache NiFi org.apache.nifi:nifi-jolt-transform-json-ui Maven

Nov 27, 2023