Lucene search
Veracode Vulnerability DatabaseVERACODE:13436HistoryMar 12, 2019 - 2:07 a.m.
Cross-Site Scripting (XSS)
2019-03-1202:07:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.002 Low
EPSS
Percentile
52.2%
nexus-core is vulnerable to cross-site scripting (XSS). A remote attacker is able to inject arbitrary Javascript into a victim’s browser via the repoId and format parameters of the healthCheckFileDetail function, the file name in the File Upload functionality of Staging Upload, the username when creating a new user, and the IQ Server URL field in the IQ Server Connection.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nexus-core | le | 3.7.1-02 |
Related
prion
prion
Cross site scripting
2018-02-09 22:29:00
nvd
nvd
CVE-2018-5306
2018-02-09 22:29:01
cve
cve
CVE-2018-5306
2018-02-09 22:29:01
osv
osv
CVE-2018-5306
2018-02-09 22:29:01
cvelist
cvelist
CVE-2018-5306
2018-02-09 22:00:00
zdt
zdt
packetstorm
packetstorm
Sonatype Nexus Repository Manager OSS/Pro 2.14.5 / 3.7.1 XSS
2018-02-08 00:00:00