Description
A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19. A user that requests a crafted path can traverse up the file system to get access to content on disk (that the user running nxrm also has access to).
Remediation
References
Related Vulnerabilities
MySQL Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2005-0709)
WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.21)
WordPress Plugin Easy Property Listings Cross-Site Request Forgery (3.3.5.8)
WordPress Plugin Sticky Related Posts Cross-Site Scripting (1.0)
WordPress Plugin MathJax-LaTeX Cross-Site Request Forgery (1.1)