Description
A Cross Site Scripting (XSS) vulnerability exists in Nacos 2.0.3 in auth/users via the (1) pageSize and (2) pageNo parameters.
Remediation
References
https://github.com/alibaba/nacos/issues/7359
Related Vulnerabilities
CVE-2021-32012 Vulnerability in npm package xlsx
CVE-2023-46604 Vulnerability in maven package org.apache.activemq:activemq-client
CVE-2022-26260 Vulnerability in npm package simple-plist
CVE-2020-26939 Vulnerability in maven package org.bouncycastle:bcprov-jdk15on
CVE-2020-36640 Vulnerability in maven package org.bonitasoft.connectors:bonita-connector-webservice