Description

A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19. A user that requests a crafted path can traverse up the file system to get access to content on disk (that the user running nxrm also has access to).

Remediation

References

CVE-2020-15012

Related Vulnerabilities

Outdated JavaScript libraries

Vanilla Forums Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2018-15833)

Microsoft SQL Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-5090)

Apache HTTP Server Other Vulnerability (CVE-2002-0061)

WordPress Plugin Google Analytics Opt-Out Cross-Site Scripting (2.3.4)

Severity

High

Classification

CVE-2020-15012 CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities