CVE-2018-5306

Multiple cross-site scripting (XSS) vulnerabilities in Sonatype Nexus Repository Manager (aka NXRM) 3.x before 3.8 allow remote attackers to inject arbitrary web script or HTML via (1) the repoId or (2) format parameter to service/siesta/healthcheck/healthCheckFileDetail/.../index.html; (3) the filename in the "File Upload" functionality of the Staging Upload; (4) the username when creating a new user; or (5) the IQ Server URL field in the IQ Server Connection functionality.

• CWE-79

• http://seclists.org/fulldisclosure/2018/Feb/23Mailing List, Third Party Advisory
• https://support.sonatype.com/hc/en-us/articles/360000134968Vendor Advisory
• https://www.sec-consult.com/en/blog/advisories/multiple-cross-site-scripting-vulnerabilities-in-sonatype-nexus-repository-manager-oss-pro/index.htmlExploit, Third Party Advisory
• http://seclists.org/fulldisclosure/2018/Feb/23Mailing List, Third Party Advisory
• https://support.sonatype.com/hc/en-us/articles/360000134968Vendor Advisory
• https://www.sec-consult.com/en/blog/advisories/multiple-cross-site-scripting-vulnerabilities-in-sonatype-nexus-repository-manager-oss-pro/index.htmlExploit, Third Party Advisory

Published

Feb 9, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5296In PoDoFo 0.9.5, there is an uncontrolled memory allocation …
• CVE-2018-5298In the Procter & Gamble "Oral-B App" (aka com.pg.oralb.oralb…
• CVE-2018-5299A stack-based Buffer Overflow Vulnerability exists in the we…
• CVE-2018-5301Magento Community Edition and Enterprise Edition before 2.0.…
• CVE-2018-5303An issue was discovered on the Impinj Speedway Connect R420 …
• CVE-2018-5304An issue was discovered on the Impinj Speedway Connect R420 …
• CVE-2018-5307Multiple cross-site scripting (XSS) vulnerabilities in Sonat…
• CVE-2018-5308PoDoFo 0.9.5 does not properly validate memcpy arguments in …
• CVE-2018-5309In PoDoFo 0.9.5, there is an integer overflow in the PdfObje…
• CVE-2018-5310In the "Media from FTP" plugin before 9.85 for WordPress, Di…
• CVE-2018-5311The Easy Custom Auto Excerpt plugin 2.4.6 for WordPress has …
• CVE-2018-5312The tabs-responsive plugin 1.8.0 for WordPress has XSS via t…