جزئیات آسیب‌پذیری

A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions than they were authorized to hold, including full administrative access, without any additional authorization check or role reassignment.

• https://help.sonatype.com/en/sonatype-nexus-repository-3-95-0-release-notes.html patch
• https://support.sonatype.com/hc/en-us/articles/53889365883539/ vendor-advisory