Summary
Ein Angreifer kann mehrere Schwachstellen in Sonatype Nexus Repository Manager ausnutzen, um Informationen offenzulegen oder einen Cross Site Scripting Angriff durchzuführen.
Product
Sonatype Nexus Repository Manager ist ein Verwaltungstool für Software-Bestandteile.
Vulnerabilities 2
-
Medium 6.2
Nexus Repository 3 - Server-Side Request Forgery in Proxy Repository Configuration
Server-Side Request Forgery (SSRF) vulnerability in Sonatype Nexus Repository 3 versions 3.0.0 and later allows authenticated administrators to configure proxy repositories with URLs that can access unintended network destinations, potentially including cloud…
-
Medium 5.1
Nexus Repository 3 - Cross-Site Scripting
A reflected cross-site scripting vulnerability exists in Nexus Repository 3 that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser through a specially crafted request requiring user interaction.
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2026-2838, EUVD-2026-2665
-
#1
Initiale Fassung
References
-
Sonatype Security Advisory CVE-2026-0600 vom 2026-01-13
https://support.sonatype.com/hc/en-us/articles/47928855816595-CVE-2026-0600-Nexus-Repository-3-Server-Side-Request-Forgery-2026-01-13
-
Sonatype Security Advisory CVE-2026-0601 vom 2026-01-13
https://support.sonatype.com/hc/en-us/articles/47934334375955-CVE-2026-0601-Nexus-Repository-3-Cross-Site-Scripting-2026-01-13