Servers and applications
CVE-2021-30635
Sonatype Nexus Repository Manager 3.x before 3.30.1 allows a remote attacker to get a list of files and directories that exist in a UI-related folder via directory traversal (no customer-specific data is exposed).
- Severity
- Medium 5.3
- Published
- 27 Apr 2021
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 3.30.1
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Sonatype Nexus RepositoryServers and applications · cpe:a:sonatype:nexus_repository_manager |
|