Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerable to an HTTP header injection. By sending a crafted HTTP request, a remote attacker may disclose sensitive information or request external …
高危 CVSS 8.2
摘要
Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerable to an HTTP header injection. By sending a crafted HTTP request, a remote attacker may disclose sensitive information or request external resources from a vulnerable instance.
中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。
深度研判
该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。
受影响产品
- :
数据来源
- NVD DATABASE
原始链接
- https://issues.sonatype.org/secure/ReleaseNote.jspa Not Applicable
- https://support.sonatype.com/hc/en-us/articles/4405941762579 Patch
- https://issues.sonatype.org/secure/ReleaseNote.jspa Not Applicable
- https://support.sonatype.com/hc/en-us/articles/4405941762579 Patch
时间线
- nvd_ingest NVD