| Package | Affected versions | Patched versions |
|---|---|---|
| nexus repository manager | ≥ 3.0.0, < 3.92.0 | 3.92.0 |
An authenticated user with the nx-licensing-create privilege can upload a specially crafted license file to execute arbitrary operating system commands as the Nexus process user in Sonatype Nexus Repository 3 versions before 3.92.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free