CVE-2021-40143

Vulnerability

Sonatype Nexus Repository versions 3.x through 3.33.1-01 are vulnerable to HTTP header injection. By sending a crafted HTTP request, an attacker can inject arbitrary headers into the server's response, potentially leading to information disclosure or server-side request forgery (SSRF). [1]

Exploitation

A remote attacker without authentication can craft a malicious HTTP request containing injected headers. The vulnerability is triggered when the application processes the request and reflects the injected headers in its response or uses them to make subsequent requests. [1]

Impact

Successful exploitation can result in the disclosure of sensitive information (e.g., internal network details, cookies, or authentication tokens) or the ability to make the server perform requests to external or internal resources, potentially leading to further compromise. [1]

Mitigation

As of the publication date, no official fix or workaround has been disclosed by Sonatype. Administrators are advised to monitor security advisories and upgrade to a patched version once available. [1]