Description

A Cross Site Scripting (XSS) vulnerability exists in Nacos 2.0.3 in auth/users via the (1) pageSize and (2) pageNo parameters.

Remediation

References

https://github.com/alibaba/nacos/issues/7359

Related Vulnerabilities

CVE-2021-21293 Vulnerability in maven package org.http4s:blaze-core_2.13

CVE-2020-7700 Vulnerability in npm package phpjs

CVE-2022-36882 Vulnerability in maven package org.jenkins-ci.plugins:git

CVE-2023-29923 Vulnerability in maven package tech.powerjob:powerjob

CVE-2019-10761 Vulnerability in npm package vm2

Severity

High

Classification

CWE-79 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Exploit Issue Tracking Third Party Advisory