GHSA-f34x-8pf6-qc9cHighCVSS 8.2

HTTP header injection in Sonatype Nexus Repository

Published
September 8, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2021-40143 →

📋 Description

Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerable to an HTTP header injection. By sending a crafted HTTP request, a remote attacker may disclose sensitive information or request external resources from a vulnerable instance.

🎯 Affected products1

  • maven/org.sonatype.nexus:nexus-repository:>= 3.0.0, <= 3.33.1-01

🔗 References (5)