Description
Due to a regression introduced in version 3.83.0, a security header is no longer applied to certain user-uploaded content served from repositories. This may allow an authenticated attacker with repository upload privileges to exploit a stored cross-site scripting (XSS) vulnerability with user context.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Sonatype | Nexus Repository | 3.83.0 – ≤ 3.86.2 | — |
Advisories 1
- WID-SEC-2025-2864 Sonatype Nexus Repository Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 16, 2025