CVE-2020-24622: Sonatype Nexus

Medium severity, CVSS 4.9. EPSS: 1% chance of exploitation in the next 30 days.

In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user.

Affected products

• Sonatype Nexus: from 3.0.0, before 3.27.0 (fixed in 3.27.0)

Published 2020-08-25. Last modified 2026-06-17.