E0X1337

**Name of the Vulnerable Software and Affected Versions** Sonatype Nexus Repository (affected versions not specified) **Description** A user account with permissions to deploy artifacts to a hosted Maven repository can upload a POM file containing an oversized metadata field. This action results in a denial of service for the specific repository, causing all subsequent attempts to list or browse its components to fail permanently until an administrator repairs the underlying data. This issue only impacts the targeted repository, while other repositories and the general server health remain unaffected. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Nexus Repository 3 did not apply its existing Server-Side Request Forgery (SSRF) protections to HTTP redirect targets returned by proxy repository upstream servers. Any user with read access to a proxy repository backed by an attacker-controlled or compromised upstream server — including an anonymous user, if anonymous access is enabled — could receive a response from an internal network address or cloud metadata endpoint as repository content, potentially exposing sensitive information such as cloud IAM credentials.