Sonatype Nexus Repository Manager Code Execution

The vulnerability of Sonatype Nexus Repository Manager is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Sonatype Nexus Repository Manager Privilege Escalation

The vulnerability of Sonatype Nexus Repository Manager is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

PT-2022-20666

Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager OSS version 3.37.3-02 Description The issue is related to incorrect access control, allowing for authentication bypass. This can be exploited remotely, with the attack vector involving response manipulation. A...

Unrestricted Upload of File with Dangerous Type in Sonatype Nexus Repository Manager

Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution...

GHSA-HMJV-PX3J-933C Unrestricted Upload of File with Dangerous Type in Sonatype Nexus Repository Manager

Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution...

CVE-2022-27907

Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF...

CVE-2022-27907

Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF...

Server side request forgery (ssrf)

Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF...

CVE-2022-27907

CVE-2022-27907 affects Sonatype Nexus Repository Manager 3.x before 3.38.0, with an SSRF vulnerability. Connected documents describe a code issue that forces the server to send a query request, enabling SSRF. Exploitation details are not provided in the sources; no in‑the‑wild exploit data is sta...

PT-2022-18682

Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager versions prior to 3.38.0 Description The issue allows for Server-Side Request Forgery SSRF, which is a type of attack where an attacker can trick a server into making requests to arbitrary domains. This can...

CVE-2022-27907: Server-Side Request Forgery (SSRF)

Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF...

CVE-2021-43961

Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...

CVE-2021-43961

Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...

CVE-2021-43961

Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...

Design/Logic Flaw

Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...

CVE-2021-43961

Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...

CVE-2021-43961

CVE-2021-43961 affects Sonatype Nexus Repository Manager 3.36.0 (NXS/NXRM). The connected sources specify a HTML Injection vulnerability in this version. No exploit vectors, exploit status, or remediation details are provided in the available documents. The reports consistently describe the issue...

CVE-2021-43961: Improper Neutralization of Input During Web Page Generation

Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...

PT-2022-11958

Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager version 3.36.0 Description The issue allows for HTML Injection. Recommendations For Sonatype Nexus Repository Manager version 3.36.0, at the moment, there is no information about a newer version that contains ...

Sonatype Nexus Repository Manager cross-site scripting vulnerabilities

Sonatype Nexus Repository Manager NXRM is a repository manager from Sonatype, Inc. that is used to manage, store, and distribute software, among other things. A cross-site scripting vulnerability exists in Sonatype Nexus Repository Manager 3.x through 3.37.0. A remote attacker sending a specially...