Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-ghg9-vwgf-3fv8

Опубликовано: 07 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.6

Описание

Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with permission to manage privileges could, under certain role configurations, escalate their own access to full administrator by exploiting a type-confusion flaw in the privilege update endpoint.

Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with permission to manage privileges could, under certain role configurations, escalate their own access to full administrator by exploiting a type-confusion flaw in the privilege update endpoint.

EPSS

Процентиль: 19%
0.00271
Низкий

8.6 High

CVSS4

Дефекты

CWE-843

Связанные уязвимости

nvd
около 2 месяцев назад

Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with permission to manage privileges could, under certain role configurations, escalate their own access to full administrator by exploiting a type-confusion flaw in the privilege update endpoint.

EPSS

Процентиль: 19%
0.00271
Низкий

8.6 High

CVSS4

Дефекты

CWE-843