CVE-2021-43293: SSRF
First published: Thu Nov 04 2021(Updated: )
Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to potentially perform network enumeration via Server Side Request Forgery (SSRF).
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sonatype Nexus Repository Manager | >=3.0.0<=3.35.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-43293.
What is the severity of CVE-2021-43293?
The severity of CVE-2021-43293 is medium (4.3).
What is affected by CVE-2021-43293?
Sonatype Nexus Repository Manager versions before 3.36.0 are affected by CVE-2021-43293.
How can an attacker exploit CVE-2021-43293?
An attacker can potentially perform network enumeration through Server Side Request Forgery (SSRF).
How can I fix CVE-2021-43293?
To fix CVE-2021-43293, upgrade to Sonatype Nexus Repository Manager version 3.36.0 or later.
- collector/nvd-index
- vendor/sonatype
- canonical/sonatype nexus repository manager
- version/sonatype nexus repository manager/3.0.0
- version/sonatype nexus repository manager/3.35.0