Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Sonatype Nexus Repository before 3.21.2 allows XSS.
Advisories for Maven/Org.sonatype.nexus/Nexus-Core package
2020
Improper Input Validation
Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution.