Vulnerability · Published Oct 12, 2020 · Assigned by mitre
CVE-2020-15012
High 8.6
In plain English
A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.6% (higher than 85% of all known vulnerabilities).
Severity (CVSS NVD)8.6High
Exploit odds (30 days)2.6%top 14.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19. A user that requests a crafted path can traverse up the file system to get access to content on disk (that the user running nxrm also has access to).
Affected products (as reported)
References
- https://support.sonatype.com/hc/en-us/articles/360051068253 x_refsource_CONFIRM