{"id":"CVE-2019-11629","details":"Sonatype Nexus Repository Manager 2.x before 2.14.13 allows XSS.","modified":"2026-07-08T15:54:42.783077Z","published":"2019-05-07T18:29:01.287Z","references":[{"type":"FIX","url":"https://support.sonatype.com/hc/en-us/articles/360022528733-CVE-2019-11629-Nexus-Repository-Manager-2-Cross-Site-Scripting-XSS-2019-05-02"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/sonatype/nexus-public","events":[{"introduced":"0"},{"fixed":"be603d5772ded19e05879e6ae9a670f2cba9d3dd"}],"database_specific":{"cpe":"cpe:2.3:a:sonatype:nexus_repository_manager:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.0.0"},{"fixed":"2.14.13"}],"source":"CPE_RANGE"}}],"versions":["release-2.14.12-02","release-2.14.11-01","release-2.14.10-01","release-2.14.9-01","release-2.14.5-02","release-2.14.4-03","release-2.14.4-02"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-11629.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}