Design/Logic Flaw

2021-06-1800:15:00

PRIOn knowledge base

www.prio-n.com

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.8%

JSON

Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content of a blob file (via a GET request) without having been granted access.

CPENameOperatorVersion
nexus_repository_managerge3.0.0
nexus_repository_managerlt3.31.0

CPE	Name	Operator	Version
	nexus_repository_manager	ge	3.0.0
	nexus_repository_manager	lt	3.31.0

References

support.sonatype.com/hc/en-us/articles/4402433828371