CVSS 3.1
4.8 mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:NCVE-2020-10203
Medium (4.8) in sonatype nexus. EPSS 0.9% chance of exploitation in the next 30 days. Fixed in org.sonatype.nexus:nexus-core 3.21.2.
Sonatype Nexus Repository before 3.21.2 allows XSS.
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sonatype:nexus
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-3944-787c-f852 | Maven | org.sonatype.nexus:nexus-core | <3.21.2 | 3.21.2 |