CVE-2020-14604 Nexus Repository 3 - Authorization Bypass in Component Upload API - 2020-07-14 漏洞概述 Nexus Repository Manager 3 存在一个授权绕过漏洞，允许攻击者通过上传组件 API 绕过授权检查。 影响范围 Nexus Repository Manager 3.15.0 到 3.21.1 修复方案 升级到 Nexus Repository Manager 3.22.0 或更高版本。 参考链接 Nexus Repository Manager 3.22.0 Release Notes Sonatype Security Advisory 参考链接 Nexus Repository Manager 3.22.0 Release Notes Sonatype Security Advisory