CVE-2021-34553

Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content of a blob file (via…

published June 17, 2021

CVSS
—
EPSS
4%
Percentile
89.6
In the wild
Unconfirmed
What it is

Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content of a blob file (via a GET request) without having been granted access.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03675 · 89.6th percentile
Published
2021-06-17T23:41Z
EPSS history
Timeline
  • 17 JUN 23:41Z
    Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content of a blob file (via…
    cvelistv5