Sonatype Nexus Repository Manager Cross-Site Scripting Vulnerability (CNVD-2018-05183)

Sonatype Nexus Repository Manager aka NXRM is a maven repository manager. Multiple cross-site scripting vulnerabilities exist in Sonatype Nexus Repository Manager version 2.x prior to 2.14.6. A remote attacker can exploit the vulnerabilities to inject arbitrary web script or HTML using a variety ...