Vulnerabilities

Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API.

Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization vulnerability (CWE-863) in the repository-creation user interface.

Nexus Repository 3 did not fully sandbox JEXL expressions used in Content Selectors.

Nexus Repository 3 was found to be vulnerable to stored cross-site scripting (XSS).

Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administrative UI.

Nexus Repository 3 contained an endpoint used to change the administrator account password during initial onboarding.

Sonatype Nexus Repository 3 did not immediately terminate a user's active login session or revoke their cached permissions when that user's account was deleted, deactivated, or had its password changed.

A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions than they were authorized to hold, including full administrati…

Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the DataStore configuration API.

Nexus Repository 3 contains a Server-Side Request Forgery (SSRF) vulnerability in the email configuration verification feature.