high7.5
CVE-2017-7667
Apache NiFi before 0.7.4 and 1.x before 1.3.0 need to establish the response header telling browsers to only allow framing with the same origin.
Impact
Apache NiFi before 0.7.4 and 1.x before 1.3.0 need to establish the response header telling browsers to only allow framing with the same origin.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Nifi | through 0.7.3 Versions 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.1.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/99018
- https://lists.apache.org/thread.html/d779d6129de1a5aa149c219b2fc6e9e78156614eaac92a89cbaf9bce%40%3Cdev.nifi.apache.org%3E
- http://www.securityfocus.com/bid/99018
- https://lists.apache.org/thread.html/d779d6129de1a5aa149c219b2fc6e9e78156614eaac92a89cbaf9bce%40%3Cdev.nifi.apache.org%3E