Skip to main content

My Sonatype

Community

Forum Ideas Office Hours Innovate

Learn

Courses Videos

Support

Knowledge Base Documentation

Resources

SSC Maturity Survey STEPP Assessment Hosted Workshops

Sign In Submit a request Sign In

Forum Ideas Office Hours Innovate

Courses Videos

Knowledge Base Documentation

SSC Maturity Survey STEPP Assessment Hosted Workshops

Sonatype Peter Sandbox
Announcements
Security Advisories

Articles in this section

CVE-2024-4956 Nexus Repository 3 - Path Traversal - 2024-05-16
Test Article in Security Advisories
CVE-2020-24622 Nexus Repository 3 - Sensitive Information Disclosure - 2020-09-15
CVE-2020-13933 Nexus Repository 2 & 3 - Shiro Authentication Bypass - 2020-10-15
CVE-2020-29436 Nexus Repository 3 and IQ Server - XML External Entities injection - 2020-12-15
CVE-2021-29159 Nexus Repository Manager 3 - Cross Site Scripting XSS
CVE-2021-29158 Nexus Repository Manager 3 - Sensitive Information Disclosure - 2021-04-22
CVE-2021-30635 Nexus Repository Manager 3 - Directory Traversal - 2021-04-22
CVE-2021-34553 Nexus Repository 3 - Directory Traversal - 2021-06-17
CVE-2021-37152 Nexus Repository 3 - Multiple Cross Site Scripting XSS - 2021-08-05

Test Article in Security Advisories

September 04, 2025 16:41 Updated

Did you get this?

Was this article helpful?

0 out of 0 found this helpful

Have more questions? Submit a request

Return to top

Terms of Service Privacy Policy Cookie Preferences
Copyright © 2008-present, Sonatype Inc. All rights reserved. Includes the third-party code listed here. Sonatype and Sonatype Nexus are trademarks of Sonatype, Inc. Apache Maven and Maven are trademarks of the Apache Software Foundation. M2Eclipse is a trademark of the Eclipse Foundation. All other trademarks are the property of their respective owners.