Description
A Cross Site Scripting (XSS) vulnerability exists in Nacos 2.0.3 in auth/users via the (1) pageSize and (2) pageNo parameters.
Remediation
References
https://github.com/alibaba/nacos/issues/7359
Related Vulnerabilities
CVE-2020-28442 Vulnerability in maven package org.webjars.npm:js-data
CVE-2022-4742 Vulnerability in maven package org.webjars.npm:json-pointer
CVE-2017-11555 Vulnerability in npm package node-sass
CVE-2022-39368 Vulnerability in maven package org.eclipse.californium:element-connector
CVE-2022-22880 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-base-core