CVE-2020-29436

Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to configure the system to gain access to content outside of NXRM via…

published December 17, 2020

CVSS
—
EPSS
2%
Percentile
74.1
In the wild
Unconfirmed
What it is

Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to configure the system to gain access to content outside of NXRM via an XXE vulnerability. Fixed in version 3.29.0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01500 · 74.1th percentile
Published
2020-12-17T01:53Z
EPSS history
Timeline
  • 17 DEC 01:53Z
    Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to configure the system to gain access to content outside of NXRM via…
    cvelistv5