CVE-2021-34553

Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content of a blob file (via a GET request) without having been granted access.
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:sonatype:nexus_repository_manager:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2021-06-18 00:15

Updated : 2024-02-28 18:28


NVD link : CVE-2021-34553

Mitre link : CVE-2021-34553

CVE.ORG link : CVE-2021-34553


JSON object : View

Products Affected

sonatype

  • nexus_repository_manager
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')