CVE-2021-37152

Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0

published August 10, 2021

CVSS
—
EPSS
24%
Percentile
97.9
In the wild
Unconfirmed
What it is

Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated attacker with the ability to add HTML files to a repository could redirect users to Nexus Repository Manager’s pages with code modifications.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.24389 · 97.9th percentile
Published
2021-08-10T13:25Z
EPSS history
Timeline
  • 10 AUG 13:25Z
    Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0
    cvelistv5