CVE-2020-10199

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection issue 1 of 2...

CVE-2020-10199

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection issue 1 of 2...

CVE-2020-10199

CVE-2020-10199 is a remote code execution vulnerability in Sonatype Nexus Repository Manager (NXRM) caused by a Java EL injection vulnerability. Affected versions are NXRM prior to 3.21.2 (with references noting exploitable in 3.21.1 and earlier). The underlying issue is a Java EL injection in Ne...

CVE-2020-10199

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection issue 1 of 2...

CVE-2020-10204

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution...

CVE-2020-10204

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution...

CVE-2020-10204

CVE-2020-10204 is a remote code execution vulnerability in Sonatype Nexus Repository Manager (NXRM) prior to version 3.21.2. The affected component is Nexus Repository Manager, with the root cause described across connected advisories as an RCE in versions before 3.21.2. Publicly available materi...

CVE-2020-10203

Sonatype Nexus Repository before 3.21.2 allows XSS...

CVE-2020-10203

The provided connected documents confirm CVE-2020-10203 affects Sonatype Nexus Repository prior to version 3.21.2, describing a cross-site scripting (XSS) vulnerability. The materials do not specify the root cause, affected subcomponents, technical details, exploit status, or a remediation/workar...

CVE-2020-10203

Sonatype Nexus Repository before 3.21.2 allows XSS...

PT-2020-11970

Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository versions prior to 3.21.2 Description The issue allows for cross-site scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a website. Recommendations For versions prior to 3.21.2...

CVE-2020-10204: Improper Input Validation

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution...

CVE-2020-10203: Improper Neutralization of Input During Web Page Generation

Sonatype Nexus Repository before 3.21.2 allows XSS...

CVE-2020-10199: Improper Neutralization of Special Elements used in an Expression Language Statement

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection issue 1 of 2...

CVE-2020-10204

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution. Recent assessments: ericalexanderorg at April 03, 2020 1:18pm UTC reported: Wording on this and eludes to an authenticated RCE, but they consider an anonymous user authenticated. Nexus servers store artifacts that could be...

PT-2020-6522 · Sonatype · Sonatype Nexus Repository +1

Name of the Vulnerable Software and Affected Versions: Sonatype Nexus Repository versions prior to 3.21.2 Description: The issue is related to incorrect code generation management in the Sonatype Nexus Repository Manager, which can be exploited by a remote attacker to execute arbitrary code by...

CVE-2020-10199

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection issue 1 of 2. Recent assessments: wvu-r7 at April 04, 2020 5:05am UTC reported: WIP exploit module: https://github.com/rapid7/metasploit-framework/pull/13195. Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker...

PT-2020-11971

Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository versions prior to 3.21.2 Description The issue allows for Remote Code Execution. Recommendations For versions prior to 3.21.2, update to version 3.21.2 or later to resolve the issue...

ALPINE-CVE-2019-14905

A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxosfilecopy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS...

PYSEC-2020-206

A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxosfilecopy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS...