org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model (2.5.0-03), org.sonatype.nexus.plugins.ldap:ldap-common (2.5.0-03) +13 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.5.0-03)

org.sonatype.nexus:nexus-core MAVEN version 2.5.0-03 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model 2.5.0-03 -...

org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model (2.5.0-04), org.sonatype.nexus.plugins.ldap:ldap-common (2.5.0-04) +14 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.5.0-04)

org.sonatype.nexus:nexus-core MAVEN version 2.5.0-04 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model 2.5.0-04 -...

org.sonatype.nexus.plugins:nexus-capabilities-model (2.6.1-02), org.sonatype.nexus.plugins:nexus-capabilities-testsuite-helper (2.6.1-02) +16 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.6.1-02)

org.sonatype.nexus:nexus-core MAVEN version 2.6.1-02 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.plugins:nexus-capabilities-model 2.6.1-02 -...

org.sonatype.nexus.plugins:nexus-capabilities-model (2.6.4-03), org.sonatype.nexus.plugins:nexus-capabilities-testsuite-helper (2.6.4-03) +16 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.6.4-03)

org.sonatype.nexus:nexus-core MAVEN version 2.6.4-03 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.plugins:nexus-capabilities-model 2.6.4-03 -...

Persistent Cross-Site scripting in Nexus Repository Manager

Sonatype Nexus Repository before 3.21.2 allows XSS...

GHSA-3944-787C-F852 Persistent Cross-Site scripting in Nexus Repository Manager

Sonatype Nexus Repository before 3.21.2 allows XSS...

org.sonatype.nexus.capabilities:nexus-capabilities-model (2.3.1), org.sonatype.nexus.capabilities:nexus-capabilities-testsuite-helper (2.3.1) +13 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.4.0-06)

org.sonatype.nexus:nexus-core MAVEN version 2.4.0-06 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.capabilities:nexus-capabilities-model 2.3.1 -...

org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model (2.4.0-07), org.sonatype.nexus.plugins.ldap:ldap-common (2.4.0-07) +11 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.4.0-07)

org.sonatype.nexus:nexus-core MAVEN version 2.4.0-07 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model 2.4.0-07 -...

org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model (2.4.0-08), org.sonatype.nexus.plugins.ldap:ldap-common (2.4.0-08) +11 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.4.0-08)

org.sonatype.nexus:nexus-core MAVEN version 2.4.0-08 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model 2.4.0-08 -...

org.sonatype.nexus.capabilities:nexus-capabilities-model (2.4), org.sonatype.nexus.capabilities:nexus-capabilities-testsuite-helper (2.4) +16 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.5.0-01)

org.sonatype.nexus:nexus-core MAVEN version 2.5.0-01 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.capabilities:nexus-capabilities-model 2.4 -...

org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model (2.5.0-04), org.sonatype.nexus.plugins.ldap:ldap-common (2.5.0-04) +14 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.5.0-04)

org.sonatype.nexus:nexus-core MAVEN version 2.5.0-04 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model 2.5.0-04 -...

org.sonatype.nexus.plugins:nexus-capabilities-model (2.6.3-01), org.sonatype.nexus.plugins:nexus-capabilities-testsuite-helper (2.6.3-01) +16 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.6.3-01)

org.sonatype.nexus:nexus-core MAVEN version 2.6.3-01 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.plugins:nexus-capabilities-model 2.6.3-01 -...

org.sonatype.nexus.plugins:nexus-capabilities-model (2.6.4-02), org.sonatype.nexus.plugins:nexus-capabilities-testsuite-helper (2.6.4-02) +16 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.6.4-02)

org.sonatype.nexus:nexus-core MAVEN version 2.6.4-02 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.plugins:nexus-capabilities-model 2.6.4-02 -...

org.sonatype.nexus.capabilities:nexus-capabilities-model (2.2.1), org.sonatype.nexus.capabilities:nexus-capabilities-testsuite-helper (2.2.1) +13 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.4.0-1)

org.sonatype.nexus:nexus-core MAVEN version 2.4.0-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.capabilities:nexus-capabilities-model 2.2.1 -...

org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model (2.4.0-04), org.sonatype.nexus.plugins.ldap:ldap-common (2.4.0-04) +11 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.4.0-04)

org.sonatype.nexus:nexus-core MAVEN version 2.4.0-04 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model 2.4.0-04 -...

org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model (2.4.0-05), org.sonatype.nexus.plugins.ldap:ldap-common (2.4.0-05) +11 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.4.0-05)

org.sonatype.nexus:nexus-core MAVEN version 2.4.0-05 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model 2.4.0-05 -...

org.sonatype.nexus.capabilities:nexus-capabilities-model (2.3.1), org.sonatype.nexus.capabilities:nexus-capabilities-testsuite-helper (2.3.1) +13 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.4.0-06)

org.sonatype.nexus:nexus-core MAVEN version 2.4.0-06 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.capabilities:nexus-capabilities-model 2.3.1 -...

org.sonatype.nexus.plugins:nexus-capabilities-model (2.6.1-02), org.sonatype.nexus.plugins:nexus-capabilities-testsuite-helper (2.6.1-02) +16 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.6.1-02)

org.sonatype.nexus:nexus-core MAVEN version 2.6.1-02 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.plugins:nexus-capabilities-model 2.6.1-02 -...

org.sonatype.nexus.plugins:nexus-capabilities-model (2.7.0-m1), org.sonatype.nexus.plugins:nexus-capabilities-testsuite-helper (2.7.0-m1) +16 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.7.0-m1)

org.sonatype.nexus:nexus-core MAVEN version 2.7.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.plugins:nexus-capabilities-model 2.7.0-m1 -...

org.sonatype.nexus.assemblies:nexus-base-template (>=3.4.0-02, <=3.21.1-01), org.sonatype.nexus.assemblies:nexus-core-feature (>=3.0.0-03, <=3.21.1-01) potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (>=3.0.0-03, <=3.21.1-01)

org.sonatype.nexus:nexus-core MAVEN version =3.0.0-03, =3.4.0-02, =3.0.0-03, =3.21.1-01 Source cves: CVE-2020-10204 Source advisory: OSV:GHSA-8H56-V53H-5HHJ...