CyberRota Analysis
AI-GeneratedNexus Repository 3 is vulnerable to a privilege escalation flaw in its REST privileges API, allowing authenticated users with privilege management permissions to elevate their access to full administrator rights under specific role configurations. This could lead to unauthorized access and control over the repository, posing significant risks to data integrity and security. Organizations using Nexus Repository 3 should prioritize addressing this vulnerability to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with permission to manage privileges could, under certain role configurations, escalate their own access to full administrator by exploiting a type-confusion flaw in the privilege update endpoint.