CVE-2021-40143 | BDVDB-2026-160259 Detail

Description#

Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerable to an HTTP header injection. By sending a crafted HTTP request, a remote attacker may disclose sensitive information or request external resources from a vulnerable instance.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://issues.sonatype.org/secure/ReleaseNote.jspa
https://support.sonatype.com/hc/en-us/articles/4405941762579

Exploit#

No public exploit known

History#

Version 12021-09-07Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.