MEDIUM4.8
GHSA-3944-787c-f852
Persistent Cross-Site scripting in Nexus Repository Manager
Quick fix
GHSA-3944-787c-f852 — org.sonatype.nexus:nexus-core: upgrade to the fixed version with the command below.
# pom.xml: bump <version>3.21.2</version> for org.sonatype.nexus:nexus-coreDetails
Sonatype Nexus Repository before 3.21.2 allows XSS.
Are you affected?
Enter the version of the package you're using.
Affected packages
Maven/org.sonatype.nexus:nexus-core
Introduced in:
0Fixed in: 3.21.2Fix
# pom.xml: bump <version>3.21.2</version> for org.sonatype.nexus:nexus-core