CVE-2021-30635

Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager versions prior to 3.30.1

Description The issue allows a remote attacker to get a list of files and directories that exist in a UI-related folder via directory traversal. It is noted that no customer-specific data is exposed.

Recommendations For versions prior to 3.30.1, update to version 3.30.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the UI-related folder to minimize the risk of exploitation.