CVE-2021-30635: Sonatype Nexus Repository Manager

Medium severity, CVSS 5.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Sonatype Nexus Repository Manager 3.x before 3.30.1 allows a remote attacker to get a list of files and directories that exist in a UI-related folder via directory traversal (no customer-specific data is exposed).

Affected products

• Sonatype Nexus Repository Manager: from 3.0, before 3.30.1 (fixed in 3.30.1)

Published 2021-04-27. Last modified 2026-06-17.