CVE-2016-8748: Cross-site Scripting

October 19, 2017 (updated May 1, 2019)

In Apache NiFi, there is a cross-site scripting vulnerability in connection details dialog when accessed by an authorized user. The user supplied text was not being properly handled when added to the DOM.

References

www.securityfocus.com/bid/95621
nifi.apache.org/security.html
nvd.nist.gov/vuln/detail/CVE-2016-8748

Code Behaviors & Features

Detect and mitigate CVE-2016-8748 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →