Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability

Mô tả

Tham khảo

• support.sonatype.com/hc/en-us/articles/360017310793-CVE-2019-7238-Nexus-Repository-Manager-3-Missing-Access-Controls-and-Remote-Code-Execution-February-5th-2019 · Vendor Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2019-7238

Lỗ hổng khác của nexus repository manager

• CVE-2026-77125CAO 7.1A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group management REST API endpoints did not correctly e…
• CVE-2026-77124CAO 7.2In affected versions of Nexus Repository 3, the script execution endpoint (POST /service/rest/v1/script/{name}/run) did not verify whether s…
• CVE-2026-77123TRUNG BÌNH 6.5Nexus Repository 3 contains a sensitive information disclosure vulnerability in the capability read API. An account holding the nexus:capabi…
• CVE-2026-77122TRUNG BÌNH 4.3An authorization flaw in the REST API repository details endpoint (GET /service/rest/v1/repositories/{repositoryName}) in Sonatype Nexus Rep…
• CVE-2026-77121TRUNG BÌNH 6.5A user account with permission to deploy artifacts to a hosted Maven repository could upload a POM file containing an oversized metadata fie…