What is GHSA-pqhq-xx62-2v2p?

GHSA-pqhq-xx62-2v2p is a security advisory published by GitHub Security Advisories with Medium severity. Cross-site scripting in Apache NiFi

Which CVE IDs does GHSA-pqhq-xx62-2v2p cover?

GHSA-pqhq-xx62-2v2p covers the following CVE IDs: CVE-2020-1933. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pqhq-xx62-2v2p?

GHSA-pqhq-xx62-2v2p has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-pqhq-xx62-2v2p?

GHSA-pqhq-xx62-2v2p affects 1 product, including: maven/org.apache.nifi:nifi:\u003e= 1.0.0, \u003c= 1.10.0.

GHSA-pqhq-xx62-2v2pMediumCVSS 6.1

Cross-site scripting in Apache NiFi

Vendor

GitHub Security Advisories

Published

January 6, 2022

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2020-1933 →

📋 Description

A XSS vulnerability was found in Apache NiFi 1.0.0 to 1.10.0. Malicious scripts could be injected to the UI through action by an unaware authenticated user in Firefox. Did not appear to occur in other browsers.

🎯 Affected products1

maven/org.apache.nifi:nifi:>= 1.0.0, <= 1.10.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2020-1933
https://github.com/apache/nifi/pull/3991
https://nifi.apache.org/security.html#CVE-2020-1933
https://github.com/advisories/GHSA-pqhq-xx62-2v2p