{"id":"CVE-2026-113370","published":"2026-11-04T20:18:56.137","lastModified":"2026-11-04T20:18:56.137","description":"Sonatype Nexus Repository 3 contains a SQL injection vulnerability in the optional \"Reindex Search Tables By Pattern\" task. A user who holds the nexus:tasks:create privilege can supply a crafted filter condition that the database runs as SQL. This allows the user to modify data in the Nexus database. The task is available only when the non-default setting nexus.reindex.search.by.pattern.visible is set to true.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-89"],"vendors":[],"products":[],"references":[{"url":"https://help.sonatype.com/en/sonatype-nexus-repository-3-98-0-release-notes.html","tags":[]},{"url":"https://support.sonatype.com/hc/en-us/articles/56603207226131/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}