UpHeron
All vulnerabilities

Servers and applications

CVE-2021-29159

A cross-site scripting (XSS) vulnerability has been discovered in Nexus Repository Manager 3.x before 3.30.1. An attacker with a local account can create entities with crafted properties that, when viewed by an administrator, can execute arbitrary JavaScript in the context of the NXRM application.

Severity
Medium 6.1
Published
28 Apr 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
3.30.1
Sources
NVD

Affected software

SoftwareAffected versions
Sonatype Nexus RepositoryServers and applications · cpe:a:sonatype:nexus_repository_manager
  • From 3.23.0 before 3.30.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-29159
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-29159