CVE-2021-40143
1 advisory.
Maven/org.sonatype.nexus:nexus-repository CVE-2021-40143: high 8.2
HTTP header injection in Sonatype Nexus Repository
Action: Upgrade org.sonatype.nexus:nexus-repository to 3.34.0-01 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.34.0-01 | - |
Fixed versions
| 3.34.0-01 |
Sources
- osv: GHSA-f34x-8pf6-qc9c
- https://nvd.nist.gov/vuln/detail/CVE-2021-40143
- https://github.com/sonatype/nexus-public
- https://help.sonatype.com/repomanager3/release-notes/2021-release-notes
- https://issues.sonatype.org/secure/ReleaseNote.jspa
- https://support.sonatype.com/hc/en-us/articles/4405941762579
CVE-2021-40143 · published · modified · JSON