CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. Its EPSS score suggests a 24.4% probability of exploitation in the next 30 days. Exploitation may require the attacker to be authenticated.
CVE
CVE-2021-37152
Severity
MEDIUM
CVSS
5.4
EPSS
24.39%
Original NVD Description
Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated attacker with the ability to add HTML files to a repository could redirect users to Nexus Repository Manager’s pages with code modifications.
Related CVEs
Other vulnerabilities affecting the same vendor(s)