Security Advisory

CVE-2021-37152

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-08-10 13:25:43
Last updated 2024-08-04 01:16:02
Assigner mitre
State PUBLISHED

Description

Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated attacker with the ability to add HTML files to a repository could redirect users to Nexus Repository Manager’s pages with code modifications.