Cross site scripting

2019-08-2218:15:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.9%

In Nexus Repository Manager before 3.18.0, users with elevated privileges can create stored XSS.

CPENameOperatorVersion
nexus_repository_managerge3.14.0
nexus_repository_managerle3.17.0

CPE	Name	Operator	Version
	nexus_repository_manager	ge	3.14.0
	nexus_repository_manager	le	3.17.0

References

support.sonatype.com/hc/en-us/articles/360033999733-CVE-2019-14469-Nexus-Repository-Manager-3-Cross-Site-Scripting-XSS-2019-07-26