A stored Cross-site Scripting vulnerability has been discovered in Sonatype Nexus Repository 2 This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1.
History

Fri, 22 Nov 2024 12:00:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 4.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N'}


Thu, 14 Nov 2024 16:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 4.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Thu, 14 Nov 2024 01:45:00 +0000

Type Values Removed Values Added
Description A stored Cross-site Scripting vulnerability has been discovered in Sonatype Nexus Repository 2 This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1.
Title Nexus Repository 2 - Stored XSS
First Time appeared Sonatype
Sonatype nexus Repository Manager
Weaknesses CWE-79
CPEs cpe:2.3:a:sonatype:nexus_repository_manager:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.0.4:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.0.5:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.0.6:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.10.0:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.11.0:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.11.1:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.11.2:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.11.3:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.11.4:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.12.0:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.12.1:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.13.0:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.14.0:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.14.10:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.14.11:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.14.12:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.14.13:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.14.14:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.14.15:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.14.16:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.14.17:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.14.18:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.14.19:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.14.1:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.14.20:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.14.21:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.14.2:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.14.3:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.14.4:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.14.5:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.14.6:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.14.7:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.14.8:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.14.9:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.15.0:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.15.1:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.2.0:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.3.0:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.3.1:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.4.0:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.5.0:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.5.1:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.6.0:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.6.1:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.6.2:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.6.3:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.6.4:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.7.0:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.7.1:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.7.2:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.8.0:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.8.1:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.9.0:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.9.1:*:*:*:*:*:*:*
cpe:2.3:a:sonatype:nexus_repository_manager:2.9.2:*:*:*:*:*:*:*
Vendors & Products Sonatype
Sonatype nexus Repository Manager
References
Metrics cvssV4_0

{'score': 5.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: Sonatype

Published: 2024-11-14T01:31:20.538Z

Updated: 2024-11-21T16:12:30.873Z

Reserved: 2024-05-17T19:53:34.732Z

Link: CVE-2024-5083

cve-icon Vulnrichment

Updated: 2024-11-14T15:44:26.339Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-11-14T02:15:17.257

Modified: 2024-11-21T17:15:24.990

Link: CVE-2024-5083

cve-icon Redhat

No data.