Nexus Repository Manager Improper Restriction of XML External Entity Reference Vulnerability - CVE-2020-29436 - Vulnerability Database

Nexus Repository Manager Improper Restriction of XML External Entity Reference Vulnerability - CVE-2020-29436

Medium

Reference: CVE-2020-29436

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-29436

Title: Nexus Repository Manager Improper Restriction of XML External Entity Reference Vulnerability

Overview:

Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to configure the system to gain access to content outside of NXRM via an XXE vulnerability. Fixed in version 3.29.0.