Sonatype

Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution.

Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files.

The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability.

A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creation permissions to execute arbitrary code, bypassing the nexus.…

Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control.

CWE-798: Use of Hard-coded Credentials in Sonatype Nexus Repository Manager versions 3.0.0 through 3.70.5 allows an unauthenticated attacker with network access to gain unauthorized read/write access to the internal data…

Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0.

Sonatype Nexus Repository Manager before 3.17.0 establishes a default administrator user with weak defaults (fixed credentials).

A remote unauthenticated attacker may be able to conduct credential-guessing attacks against user accounts in Sonatype Nexus Repository via authentication endpoints.

Server-Side Request Forgery (SSRF) in the Remote Browser Plugin in Sonatype Nexus Repository 2.x up to and including 2.15.2 allows unauthenticated remote attackers to exfiltrate proxy repository credentials via crafted H…

Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature.

Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution.

A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19.

Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the DataStore configuration API.

A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions than they were authorized to hold, including full administrati…

An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0.

Sonatype Nexus Repository 3 did not immediately terminate a user's active login session or revoke their cached permissions when that user's account was deleted, deactivated, or had its password changed.

Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API.

Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerable to an HTTP header injection.

There is an OS Command Injection in Nexus Repository Manager <= 2.14.14 (bypass CVE-2019-5475) that could allow an attacker a Remote Code Execution (RCE).

Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection.

Sonatype Nexus Repository 3 Pro does not check the local account status when a user signs in through a configured SAML or OAuth2/OpenID Connect identity provider.

Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold.