CVE-2024-5083

A stored Cross-site Scripting vulnerability has been discovered in Sonatype Nexus Repository 2 This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1.

Score

CVSS 4.0 5.1 Medium

Status

Deferred - 103e4ec9-0a87-450b-af77-479448ddef11

Published

2024-11-14

Last modified

2024-11-21

Weaknesses

CWE-79

Affected products

• Nexus Repository Manager (Sonatype)

References

• https://support.sonatype.com/hc/en-us/articles/30693989411987