CVE-2020-15012

2020-10-1221:15:13

Google

osv.dev

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.7%

JSON

A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19. A user that requests a crafted path can traverse up the file system to get access to content on disk (that the user running nxrm also has access to).

CPENameOperatorVersion
nexus-publiceqrelease-2.14.16-01
nexus-publiceqrelease-2.14.4-03
nexus-publiceqrelease-2.14.14-01
nexus-publiceqrelease-2.14.11-01
nexus-publiceqrelease-2.14.13-01
nexus-publiceqrelease-2.14.9-01
nexus-publiceqrelease-2.14.10-01
nexus-publiceqrelease-2.14.15-01
nexus-publiceqrelease-2.14.5-02
nexus-publiceqrelease-2.14.4-02

Name	Operator	Version
nexus-public	eq	release-2.14.16-01
nexus-public	eq	release-2.14.4-03
nexus-public	eq	release-2.14.14-01
nexus-public	eq	release-2.14.11-01
nexus-public	eq	release-2.14.13-01
nexus-public	eq	release-2.14.9-01
nexus-public	eq	release-2.14.10-01
nexus-public	eq	release-2.14.15-01
nexus-public	eq	release-2.14.5-02
nexus-public	eq	release-2.14.4-02