PatchSiren

Sonatype CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Known exploited Sonatype CVE published 2021-12-10

CVE-2019-7238

CVE-2019-7238 concerns an incorrect access control vulnerability in Sonatype Nexus Repository Manager. It is listed in CISA’s Known Exploited Vulnerabilities catalog, which means it should be treated as a high-priority remediation item. The supplied official sources do not provide version ranges or deeper technical detail, so the safest response is to follow vendor update guidance and confirm the affected [truncated]