Sign in Subscribe

← All advisories

High severity7.5NVD Advisory· Published Jun 12, 2017· Updated May 13, 2026

CVE-2017-7667

CVE-2017-7667

Description

Apache NiFi before 0.7.4 and 1.x before 1.3.0 need to establish the response header telling browsers to only allow framing with the same origin.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.apache.nifi:nifiMaven	< 0.7.4	0.7.4
org.apache.nifi:nifiMaven	>= 1.0.0, < 1.3.0	1.3.0

Affected products

8

Apache/Nifi7 versions
cpe:2.3:a:apache:nifi:*:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:apache:nifi:*:*:*:*:*:*:*:*range: <=0.7.3
- cpe:2.3:a:apache:nifi:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:nifi:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:nifi:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:nifi:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:nifi:1.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:apache:nifi:1.2.0:*:*:*:*:*:*:*
Apache Software Foundation/Apache NiFiv5
Range: 0.0.1 to 0.7.3

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

www.securityfocus.com/bid/99018nvdThird Party AdvisoryVDB EntryWEB
github.com/advisories/GHSA-jvx9-rj3w-jq99ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2017-7667ghsaADVISORY
lists.apache.org/thread.html/d779d6129de1a5aa149c219b2fc6e9e78156614eaac92a89cbaf9bce@%3Cdev.nifi.apache.org%3EghsaWEB
lists.apache.org/thread.html/d779d6129de1a5aa149c219b2fc6e9e78156614eaac92a89cbaf9bce%40%3Cdev.nifi.apache.org%3Envd

News mentions

0

No linked articles in our index yet.