Description

Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to potentially perform network enumeration via Server Side Request Forgery (SSRF).

Remediation

References

CVE-2021-43293

Related Vulnerabilities

WordPress Plugin WP Database Backup Cross-Site Request Forgery (4.3.5)

WordPress Plugin AI ChatBot Information Disclosure (4.8.9)

Oracle HTTP Server CVE-2018-2561 Vulnerability (CVE-2018-2561)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-0325)

WordPress Plugin Gallery-Flagallery Photo Portfolio SQL Injection and Information Disclosure Vulnerabilities (0.59)

Severity

Medium

Classification

CVE-2021-43293 CWE-918 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities