Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated attacker with the ability to add HTML files to a repository could redirect users to Nexus Repository Manager’s pages with code modifications.Referenceshttps://support.sonatype.comhttps://support.sonatype.com/hc/en-us/articles/4404115639827
