Sonatype Nexus Jexl RCE (CVE-2019-7238)

Exploits CVE-2019-7238 in Nexus Repository Manager 3.15.0: missing ACL on /service/extdirect previewAssets allows Jexl expression remote code execution. !/usr/bin/env python3 -- coding: utf-8 -- """Sonatype Nexus Repository Manager Jexl RCE CVE-2019-7238.""" import json import re from kittysploit...