CVE-2021-37152: Sonatype Nexus Repository Manager

Medium severity, CVSS 5.4. EPSS: 24.4% chance of exploitation in the next 30 days.

Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated attacker with the ability to add HTML files to a repository could redirect users to Nexus Repository Manager’s pages with code modifications.

Affected products

• Sonatype Nexus Repository Manager: from 3.0.0, before 3.33.0 (fixed in 3.33.0)

Published 2021-08-10. Last modified 2026-06-17.