Description
Sonatype Nexus Repository Manager 3 is vulnerable to a path traversal issue that allows unauthenticated attackers to read arbitrary files.
Remediation
Upgrade to Nexus Repository Manager version 3.68.1 or later
References
Related Vulnerabilities
MySQL CVE-2012-0115 Vulnerability (CVE-2012-0115)
PHP Integer Overflow or Wraparound Vulnerability (CVE-2016-3078)
Grafana CVE-2024-1442 Vulnerability (CVE-2024-1442)
Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2006-4475)
Apache HTTP Server Off-by-one Error Vulnerability (CVE-2005-1268)