CVE-2017-7667

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.4%

exploitation probability

1.4%top 28% of all CVEs

observed exploitation

nono source reports it

Apache NiFi before 0.7.4 and 1.x before 1.3.0 need to establish the response header telling browsers to only allow framing with the same origin.

Affected products

References