CVE-2021-37152

Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated attacker with the ability to add HTML files to a repository could redirect users to Nexus Repository Manager’s pages with code modifications.

Affected products

Nexus Repository Manager, Sonatype Nexus Repository Manager

Sonatype Nexus Repository Manager

< 3.33.0

Fix

Available

CVSS 3.1

5.4 MEDIUM

EPSS

24.4% (98th percentile)

Weakness

CWE-79

NVD status

Modified

Published

2021-08-10