CVE-2021-37152

2021-08-1014:15:07

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.2%

JSON

Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated attacker with the ability to add HTML files to a repository could redirect users to Nexus Repository Manager’s pages with code modifications.

CPENameOperatorVersion
nexus-publiceqrelease-3.22.1-02
nexus-publiceqrelease-3.21.0-05
nexus-publiceqrelease-3.31.1-01
nexus-publiceqrelease-3.4.0-02
nexus-publiceqrelease-3.5.0-02
nexus-publiceqrelease-3.27.0-03
nexus-publiceqrelease-3.32.0-03
nexus-publiceqrelease-3.28.1-01
nexus-publiceqrelease-3.30.0-01
nexus-publiceqrelease-3.31.0-01

Name	Operator	Version
nexus-public	eq	release-3.22.1-02
nexus-public	eq	release-3.21.0-05
nexus-public	eq	release-3.31.1-01
nexus-public	eq	release-3.4.0-02
nexus-public	eq	release-3.5.0-02
nexus-public	eq	release-3.27.0-03
nexus-public	eq	release-3.32.0-03
nexus-public	eq	release-3.28.1-01
nexus-public	eq	release-3.30.0-01
nexus-public	eq	release-3.31.0-01