ZeroHour

CVE-2017-7667

CVSS 3.0
7.5 high
EPSS
1%p71
Published
()
Modified
Description

Apache NiFi before 0.7.4 and 1.x before 1.3.0 need to establish the response header telling browsers to only allow framing with the same origin.

Vendors
apache
Products
nifi
Weakness
CWE-346
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

In the news

No ingested article mentions this CVE yet.