CVE-2020-29436

2020-12-1702:15:12

Google

osv.dev

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to configure the system to gain access to content outside of NXRM via an XXE vulnerability. Fixed in version 3.29.0.

CPENameOperatorVersion
nexus-publiceqrelease-3.23.0-03
nexus-publiceqrelease-3.4.0-02
nexus-publiceqrelease-3.22.1-02
nexus-publiceqrelease-3.20.0-04
nexus-publiceqrelease-3.28.0-01
nexus-publiceqrelease-3.28.1-01
nexus-publiceqrelease-3.3.0-01
nexus-publiceqrelease-3.20.1-01
nexus-publiceqrelease-3.26.0-04
nexus-publiceqrelease-3.25.1-02

Name	Operator	Version
nexus-public	eq	release-3.23.0-03
nexus-public	eq	release-3.4.0-02
nexus-public	eq	release-3.22.1-02
nexus-public	eq	release-3.20.0-04
nexus-public	eq	release-3.28.0-01
nexus-public	eq	release-3.28.1-01
nexus-public	eq	release-3.3.0-01
nexus-public	eq	release-3.20.1-01
nexus-public	eq	release-3.26.0-04
nexus-public	eq	release-3.25.1-02