https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T16:55:56.480471+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2024-33176 cnvd-2024-33176 2026-10-15T16:55:56.483559+00:00 cnvd-2024-33176 https://cve.radiocsirt.org/vuln/euvd-2026-163230 EUVD-2026-163230 2026-10-15T16:55:56.483590+00:00 EUVD-2026-163230 https://cve.radiocsirt.org/vuln/fkie_cve-2024-37389 fkie_cve-2024-37389 2026-10-15T16:55:56.483604+00:00

Apache NiFi 1.10.0 through 1.26.0 and 2.0.0-M1 through 2.0.0-M3 support a description field in the Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, which the client browser will execute within the session context of the authenticated user. Upgrading to Apache NiFi 1.27.0 or 2.0.0-M4 is the recommended mitigation.

 https://cve.radiocsirt.org/vuln/ghsa-h658-qqv9-qwv8 GHSA-h658-qqv9-qwv8 — Apache NiFi vulnerable to Cross-site Scripting 2026-10-15T16:55:56.483632+00:00

Affected: Maven: org.apache.nifi:nifi-web-ui

Apache NiFi 1.10.0 through 1.26.0 and 2.0.0-M1 through 2.0.0-M3 support a description field in the Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, which the client browser will execute within the session context of the authenticated user. Upgrading to Apache NiFi 1.27.0 or 2.0.0-M4 is the recommended mitigation.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1538 WID-SEC-W-2024-1538 — Apache Nifi: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-15T16:55:56.483657+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache Nifi ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.