Exploit for Nexus-Repository-Manager-3-CVE-2020-11444-

kitploit · 2026-08-25

Description

CVE-2020-11444 in Nexus Repository Manager 3 involving the tools component.

Parameterexphub · request body

Path/service/rest/beta/security/users/admin/change-password

CVE-2020-11444 unauthorized admin password change in Nexus Repository Manager 3.x (CWE-276)

Sonatype Nexus≤ 3.21.2

8.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Modified:2026-08-25 04:15

Last Seen:2026-08-26 05:18

Reporter:KitPloit

MARKDOWN2 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-CN016-NEXUS-REPOSITORY-MANAGER-3-CVE-2020-11444-
لا يحتوي هذا المستودع على ملف README.