Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerable to an HTTP header injection. By sending a crafted HTTP request, a remote attacker may disclose sensitive information or request external …
High CVSS 8.2
Summary
Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerable to an HTTP header injection. By sending a crafted HTTP request, a remote attacker may disclose sensitive information or request external resources from a vulnerable instance.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://issues.sonatype.org/secure/ReleaseNote.jspa Not Applicable
- https://support.sonatype.com/hc/en-us/articles/4405941762579 Patch
- https://issues.sonatype.org/secure/ReleaseNote.jspa Not Applicable
- https://support.sonatype.com/hc/en-us/articles/4405941762579 Patch
Timeline
- nvd_ingest NVD