Threats tagged 'ghsa-q5h3-884x-5m6j'

Sonatype Nexus Repository 3 has an authorization bypass vulnerability where a user with valid credentials and add or edit privileges on a group repository can add a repository they are not authorized to access. This allows the user to read content from that unauthorized repository via the group repository. Anonymous users can only exploit this if explicitly granted the necessary privileges by an administrator.