Unrated
Sonatype Nexus Repository Manager 2.x before 2.14.13 allows XSS.
CVE-2019-11629
First seen on SecPulse
References
- patch support.sonatype.com