nexus-uploader (1.0.14), uranium (>=0.2.38, <=1.1.0) potentially affected by CVE-2021-3572 via pip (8.1.1)

pip PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - nexus-uploader 1.0.14 - uranium =0.2.38, =1.1.0 Source cves: CVE-2021-3572 Source advisory: OSV:GHSA-5XP3-JFQ3-5Q8X...

nexus-uploader (1.0.14), uranium (>=0.2.38, <=1.1.0) potentially affected by CVE-2021-3572 via pip (8.1.1)

pip PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - nexus-uploader 1.0.14 - uranium =0.2.38, =1.1.0 Source cves: CVE-2021-3572 Source advisory: OSV:PYSEC-2021-437...

Sonatype Nexus Repository Manager 3.x < 3.21.2 RCE

The Sonatype Nexus Repository Manager server application running on the remote host is version 3.x prior to 3.21.2. It is, therefore, affected by a remote code execution vulnerability, which allows for an attacker with any type of account on NXRM to execute arbitrary code by crafting a malicious...

CVE-2021-43293

Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to potentially perform network enumeration via Server Side Request Forgery SSRF...

CVE-2021-43293

Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to potentially perform network enumeration via Server Side Request Forgery SSRF...

Server side request forgery (ssrf)

Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to potentially perform network enumeration via Server Side Request Forgery SSRF...

CVE-2021-43293

Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to potentially perform network enumeration via Server Side Request Forgery SSRF...

CVE-2021-43293

The CVE-2021-43293 entry describes a vulnerability in Sonatype Nexus Repository Manager 3.x pre-3.36.0 where a remote authenticated attacker can perform network enumeration via Server Side Request Forgery (SSRF). Affected product: Nexus Repository Manager 3.x. Root cause: SSRF condition in the se...

CVE-2021-43293

Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to potentially perform network enumeration via Server Side Request Forgery SSRF...

PT-2021-23805

Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager versions prior to 3.36.0 Description The issue allows a remote authenticated attacker to potentially perform network enumeration via Server Side Request Forgery SSRF. This means an attacker could exploit the...

CVE-2021-43293: Server-Side Request Forgery (SSRF)

Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to potentially perform network enumeration via Server Side Request Forgery SSRF...

VulnCheck KEV: CVE-2020-10199

Sonatype Nexus Repository contains an unspecified vulnerability that allows for remote code execution...

Sonatype Nexus Repository code-related vulnerabilities

Sonatype Nexus Repository is a repository manager from Sonatype, Inc. that is used for managing, storing, and distributing software, among other things. A security vulnerability exists in Sonatype Nexus Repository 3, which stems from a lack of validation and filtering of user-submitted input on t...

Sonatype Nexus Repository Remote Code Execution Vulnerability

Sonatype Nexus Repository contains an unspecified vulnerability that allows for remote code execution...

CVE-2021-42568

Sonatype Nexus Repository Manager 3.x through 3.35.0 allows attackers to access the SSL Certificates Loading function via a low-privileged account...

Code injection

Sonatype Nexus Repository Manager 3.x through 3.35.0 allows attackers to access the SSL Certificates Loading function via a low-privileged account...

CVE-2021-42568

Sonatype Nexus Repository Manager 3.x through 3.35.0 allows attackers to access the SSL Certificates Loading function via a low-privileged account...

CVE-2021-42568

Sonatype Nexus Repository Manager 3.x through 3.35.0 allows attackers to access the SSL Certificates Loading function via a low-privileged account...

CVE-2021-42568

CVE-2021-42568 affects Sonatype Nexus Repository Manager 3.x up to 3.35.0. The vulnerability arises from incorrect access control that allows a low-privileged account to access the SSL Certificates Loading function, potentially exposing sensitive certificate-related data. The documented impact is...

PT-2021-23634

Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager versions 3.x through 3.35.0 Description The issue allows attackers to access the SSL Certificates Loading function via a low-privileged account. Recommendations For versions 3.x through 3.35.0, update to a...