high8.6
CVE-2020-15012
A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19.
Impact
A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19. A user that requests a crafted path can traverse up the file system to get access to content on disk (that the user running nxrm also has access to).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonatype | Nexus Repository Manager | from 2.0 before 2.14.19 |