Sonatype Nexus Repository Manager 3.x before 3.30.1 allows a remote attacker to get a list of files and directories that exist in a UI-related folder via directory traversal (no customer-specific data is exposed).
CPE | Name | Operator | Version |
---|---|---|---|
nexus_repository_manager | ge | 3.0 | |
nexus_repository_manager | lt | 3.30.1 |