Description Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF. Remediation References CVE-2022-27907 Related Vulnerabilities LimeSurvey Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2025-41076) WordPress Plugin All-In-One Security (AIOS)-Security and Firewall SQL Injection (3.8.7) WordPress Plugin Social Count Plus Cross-Site Scripting (3.0.2) WordPress CVE-2020-28039 Vulnerability (CVE-2020-28039) Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-9516) Severity Medium Classification CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Tags Missing Update Known Vulnerabilities CWE-918 CVE-2022-27907