Threats tagged 'ghsa-9pmx-p77j-955r'

Sonatype Nexus Repository 3 contains a vulnerability where active user sessions are not immediately terminated or their cached permissions revoked when the user's account is deleted, deactivated, or their password changed. This allows users with active sessions to continue accessing the repository with their previous permissions until the session expires naturally. The vulnerability could enable unauthorized access to read, modify, or delete repository content after access was intended to be revoked.