356 matches found
CVE-2020-29436
Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to configure the system to gain access to content outside of NXRM via an XXE vulnerability. Fixed in version 3.29.0...
Design/Logic Flaw
Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to configure the system to gain access to content outside of NXRM via an XXE vulnerability. Fixed in version 3.29.0...
Sonatype Nexus Repository Manager External Entity Injection Vulnerability
Sonatype Nexus Repository Manager NXRM is a Maven repository manager from Sonatype USA. An external entity injection vulnerability exists in the Sonatype Nexus Repository Manager product, which allows an attacker with Nexus Repository Manager administrator privileges to configure the system in su...
CVE-2020-29436: Improper Restriction of XML External Entity Reference
Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to configure the system to gain access to content outside of NXRM via an XXE vulnerability. Fixed in version 3.29.0...
PT-2020-17160
Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager versions prior to 3.29.0 Description The issue allows a user with admin privileges to configure the system to gain access to content outside of NXRM via an XXE vulnerability. Recommendations For versions prior...
Sonatype Nexus Repository Manager code-related vulnerabilities
Sonatype Nexus Repository Manager NXRM is a Maven repository manager from Sonatype USA. An external entity injection vulnerability exists in the Sonatype Nexus Repository Manager product, which allows an attacker with Nexus Repository Manager administrator privileges to configure the system in su...
CVE-2020-15012
A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19. A user that requests a crafted path can traverse up the file system to get access to content on disk that the user running nxrm also has access to...
CVE-2020-15012
A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19. A user that requests a crafted path can traverse up the file system to get access to content on disk that the user running nxrm also has access to...
CVE-2020-15012
Sonatype Nexus Repository Manager 2.x (pre-2.14.19) is affected by a Directory Traversal vulnerability. A crafted path can cause FS traversal to read content on disk to which the Nexus process user has access. Root cause is path traversal in requests; impact is exposure of local content. No expli...
CVE-2020-15012: Improper Limitation of a Pathname to a Restricted Directory
A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19. A user that requests a crafted path can traverse up the file system to get access to content on disk that the user running nxrm also has access to...
PT-2020-14118
Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager versions 2.x through 2.14.18 Description A Directory Traversal issue allows a user to request a crafted path, potentially traversing up the file system to access content on disk that the user running the...
Sonatype Nexus Repository Manager Unauthorized Access Vulnerability
Sonatype Nexus Repository Manager NXRM is a repository manager from Sonatype, Inc. that is used to manage, store, and distribute software, among other things. A security vulnerability exists in Sonatype NXRM OSS/Pro versions prior to 3.26.0. An attacker could exploit the vulnerability to access...
CVE-2020-15868
Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control...
CVE-2020-15868
Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control...
Improper access control
Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control...
CVE-2020-15868
Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control...
CVE-2020-15868: Undefined Security Weakness
Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control...
PT-2020-14675
Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager OSS/Pro versions prior to 3.26.0 Description The issue is related to Incorrect Access Control in the Sonatype Nexus Repository Manager OSS/Pro. Recommendations For versions prior to 3.26.0, update to version...
Sonatype Nexus Repository Manager Remote Code Execution Vulnerability (CNVD-2021-32036)
Nexus Repository Manager is a repository manager from Sonatype that lets you proxy, collect, and manage your dependencies so you don't have to deal with a series of JARs as often, allowing you to distribute your software with ease.OSS is the open-source, free version, and Pro is the professional,...