Cross site scripting

2019-05-0718:29:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.8%

Sonatype Nexus Repository Manager 2.x before 2.14.13 allows XSS.

CPENameOperatorVersion
nexus_repository_managerge2.0.0
nexus_repository_managerlt2.14.13

CPE	Name	Operator	Version
	nexus_repository_manager	ge	2.0.0
	nexus_repository_manager	lt	2.14.13

References

support.sonatype.com/hc/en-us/articles/360022528733-CVE-2019-11629-Nexus-Repository-Manager-2-Cross-Site-Scripting-XSS-2019-05-02