Section
Vulnerabilities
CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.
3 matching records.
-
A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse…
A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a hosted…
-
Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does…
Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. This can give the user more access than intended, up to full…
-
Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of…
Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package. The script runs in the browser of a user who opens the…
Reuse this view
Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Sonatype+%2F+JFrog&limit=100. RSS for this section: feed.xml.