CVE-2022-27907: SSRF
First published: Wed Mar 30 2022(Updated: )
Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sonatype Nexus Repository Manager | >=3.0.0<3.38.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for Sonatype Nexus Repository Manager?
The vulnerability ID for Sonatype Nexus Repository Manager is CVE-2022-27907.
What is the severity of CVE-2022-27907?
The severity of CVE-2022-27907 is medium with a severity value of 4.3.
What is the vulnerability in Sonatype Nexus Repository Manager?
The vulnerability in Sonatype Nexus Repository Manager is SSRF (Server-Side Request Forgery).
What versions of Sonatype Nexus Repository Manager are affected by CVE-2022-27907?
Sonatype Nexus Repository Manager 3.x before 3.38.0 is affected by CVE-2022-27907.
How to fix CVE-2022-27907?
To fix CVE-2022-27907, you should update Sonatype Nexus Repository Manager to version 3.38.0 or later.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/tags
- agent/event
- agent/type
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- vendor/sonatype
- canonical/sonatype nexus repository manager
- version/sonatype nexus repository manager/3.0.0