← Database

CVE-2021-37152

MEDIUM CVSS: 5.4 Published: 2021-08-10 Modified: 2026-06-17

Description

Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated attacker with the ability to add HTML files to a repository could redirect users to Nexus Repository Manager’s pages with code modifications.

Affected Platforms

Sonatype Nexus Repository Manager

Weakness Type

CWE-79

References