Skip to content
OpenAdvisories
High · 7.5 CVE-2017-7667 EUVD-2022-4438GHSA-jvx9-rj3w-jq99

Origin Validation Error in Apache NiFi

Published Jun 12, 2017 · Updated Aug 5, 2024 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache NiFi Package: org.apache.nifi:nifi Ecosystem: Maven

Description

Apache NiFi before 0.7.4 and 1.x before 1.3.0 need to establish the response header telling browsers to only allow framing with the same origin.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache NiFi 0.0.1 to 0.7.3, 1.0.0 to 1.2.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.nifi:nifi < 0.7.4 0.7.4 GHSA-jvx9-rj3w-jq99
Maven org.apache.nifi:nifi >= 1.0.0, < 1.3.0 1.3.0 GHSA-jvx9-rj3w-jq99

References