CVE-2025-9868

Published Oct 8, 2025

Last updated 3 months ago

CVSS high 8.7
HTTP

Overview

Description
Server-Side Request Forgery (SSRF) in the Remote Browser Plugin in Sonatype Nexus Repository 2.x up to and including 2.15.2 allows unauthenticated remote attackers to exfiltrate proxy repository credentials via crafted HTTP requests.
Source
103e4ec9-0a87-450b-af77-479448ddef11
NVD status
Deferred

Risk scores

CVSS 4.0

Type
Secondary
Base score
8.7
Impact score
-
Exploitability score
-
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity
HIGH

Weaknesses

103e4ec9-0a87-450b-af77-479448ddef11
CWE-918

Social media

Hype score
Not currently trending

  1. [CVE-2025-9868: HIGH] Critical vulnerability in Sonatype Nexus Repository 2.x (up to 2.15.2) enables SSRF attacks, allowing unauthorized parties to extract proxy repository data through manipulated HTTP requests.#cve,CVE-2025-9868,#cybersecurity https://t.co/snyXkE4lHz https://t.

    @CveFindCom

    8 Oct 2025

    53 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

Related CVEs

  1. Adobe ColdFusion Path Traversal Vulnerability•CVE-2026-48282
  2. Joomlack Page Builder Improper Access Control Vulnerability•CVE-2026-56290
  3. Langflow Authorization Bypass Through User-Controlled Key Vulnerability•CVE-2026-55255
  4. JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability•CVE-2026-48908
  5. NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is set to off, and the large_client_header_buffers directive size is larger than 2 megabytes. A remote, unauthenticated attacker, along with conditions beyond their control, could send large headers while creating an upstream request. This may cause a heap-based buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.•CVE-2026-42055

References

Sources include official advisories and independent security research.