CVE-2020-10204
Remote Code Execution - JavaEL Injection (low privileged accounts) in Nexus Repository Manager
Résumé
Remote Code Execution - JavaEL Injection (low privileged accounts) in Nexus Repository Manager
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Maven
org.sonatype.nexus:nexus-core
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2"}]}]
Références
- advisory nvd.nist.gov
- advisory securitylab.github.com
- advisory securitylab.github.com
- web support.sonatype.com
- web support.sonatype.com