~ / search / GHSA-3944-787c-f852

GHSA-3944-787c-f852

Persistent Cross-Site scripting in Nexus Repository Manager

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-10203

Packages

EcosystemPackageAffectedFixed in
Maven org.sonatype.nexus:nexus-core < 3.21.2 3.21.2

Details

As written in the advisory (Markdown source, shown as plain text).

Sonatype Nexus Repository before 3.21.2 allows XSS.

References

External links from the advisory. They lead to third-party sites.