Sonatype Nexus Repository Manager 3 - Remote Code Execution

Sonatype Nexus Repository Manager 3 up to and including 3.21.1 is vulnerable to Expression Language injection. An attacker authenticated with an administrative account can inject an EL expression into the user "roles" field of the coreuiUser update endpoint, leading to remote code execution. This...

CVE-2020-10199_CVE-2020-10204

MaiMeng CVE-2020-10199、CVE-2020-10204 Vulnerability Detection Tool Tool Introduction I wrote this small tool in Java in my spare time. It supports one-click detection of CVE-2020-10199 and CVE-2020-10204 vulnerabilities with a graphical interface. To ensure detection stability, random numbers are...

CVE-2020-10204

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution...

Exploit for Expression Language Injection in Sonatype Nexus

Nexus Repository Manager 3 Vuln 影响版本：= 3.21.2 CVE-2020-10199、CVE-2020-10204、CVE-2020-11444 CVE-2020-10199 远程代码命令执行 回显poc 不回显poc $\A''.getClass.forName'java.lang.Runtime'.getMethods6.invokenull.exec'touch /tmp/cve-2020-10199' 普通用户权限 /service/rest/beta/repositories/go/group 需要管理员权限 1...

Exploit for Improper Input Validation in Sonatype Nexus

PoC exploit for CVE-2020-10204, a remote command execution vulne...

CVE-2020-10204

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution...

CVE-2020-10204

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution...

CVE-2020-10204

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution. Recent assessments: ericalexanderorg at April 03, 2020 1:18pm UTC reported: Wording on this and eludes to an authenticated RCE, but they consider an anonymous user authenticated. Nexus servers store artifacts that could be...