A vulnerability marked as problematic has been reported in Sonatype Nexus Repository up to 3.90.x. Impacted is an unknown function. Performing a manipulation results in cross site scripting.
This vulnerability was named CVE-2026-3438. The attack may be initiated remotely. There is no available exploit.
It is suggested to upgrade the affected component.
