Sonatype: >> Nexus Repository Manager >> 3.77.2 Security Vulnerabilities
Sonatype Nexus Repository Manager before 3.93.0 contains an authorization vulnerability in the proxy repository configuration that allows a delegated repository administrator to disclose stored upstream proxy credentials.
CVSS Score
5.9
EPSS Score
0.003
Published
2026-06-17
A remote unauthenticated attacker may be able to conduct credential-guessing attacks against user accounts in Sonatype Nexus Repository via authentication endpoints.
CVSS Score
8.7
EPSS Score
0.004
Published
2026-06-11