Описание
An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted repository to upload arbitrary artifacts, bypassing the intended write-permission check.
EPSS
Процентиль: 37%
0.00447
Низкий
Дефекты
CWE-862
Связанные уязвимости
github
около 2 месяцев назад
An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted repository to upload arbitrary artifacts, bypassing the intended write-permission check.
EPSS
Процентиль: 37%
0.00447
Низкий
Дефекты
CWE-862