Sonatype Nexus Repository Manager Command Execution Vulnerability (CNVD-2020-28477)

Sonatype Nexus Repository Manager NXRM is a Maven repository manager from Sonatype USA. A command execution vulnerability exists in Sonatype Nexus Repository Manager. An attacker can exploit this vulnerability to execute arbitrary code with the help of a malicious request...

CVE-2020-10199

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection issue 1 of 2...

CVE-2020-10204

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution...

CVE-2020-10199

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection issue 1 of 2...

CVE-2020-10204

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution...

CVE-2020-10203

Sonatype Nexus Repository before 3.21.2 allows XSS...

CVE-2020-10203

Sonatype Nexus Repository before 3.21.2 allows XSS...

Crlf injection

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection issue 1 of 2...

Remote code execution

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution...

Cross site scripting

Sonatype Nexus Repository before 3.21.2 allows XSS...

CVE-2020-10199

CVE-2020-10199 is a remote code execution vulnerability in Sonatype Nexus Repository Manager (NXRM) caused by a Java EL injection vulnerability. Affected versions are NXRM prior to 3.21.2 (with references noting exploitable in 3.21.1 and earlier). The underlying issue is a Java EL injection in Ne...

CVE-2020-10199

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection issue 1 of 2...

CVE-2020-10199

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection issue 1 of 2...

CVE-2020-10204

CVE-2020-10204 is a remote code execution vulnerability in Sonatype Nexus Repository Manager (NXRM) prior to version 3.21.2. The affected component is Nexus Repository Manager, with the root cause described across connected advisories as an RCE in versions before 3.21.2. Publicly available materi...

CVE-2020-10204

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution...

CVE-2020-10203

Sonatype Nexus Repository before 3.21.2 allows XSS...

CVE-2020-10203

The provided connected documents confirm CVE-2020-10203 affects Sonatype Nexus Repository prior to version 3.21.2, describing a cross-site scripting (XSS) vulnerability. The materials do not specify the root cause, affected subcomponents, technical details, exploit status, or a remediation/workar...

CVE-2020-10204

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution. Recent assessments: ericalexanderorg at April 03, 2020 1:18pm UTC reported: Wording on this and eludes to an authenticated RCE, but they consider an anonymous user authenticated. Nexus servers store artifacts that could be...

CVE-2020-10199

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection issue 1 of 2. Recent assessments: wvu-r7 at April 04, 2020 5:05am UTC reported: WIP exploit module: https://github.com/rapid7/metasploit-framework/pull/13195. Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker...

PT-2020-6522 · Sonatype · Sonatype Nexus Repository +1

Name of the Vulnerable Software and Affected Versions: Sonatype Nexus Repository versions prior to 3.21.2 Description: The issue is related to incorrect code generation management in the Sonatype Nexus Repository Manager, which can be exploited by a remote attacker to execute arbitrary code by...