Remote Code Execution

nexus-yum-repository-plugin is vulnerable to remote code execution. The vulnerability exists due to a bypass of the fix for CVE-2019-5475, whereby the getCleanCommand function in CommandLineExecutor.java allows arbitrary user-supplied data to be executed as code...

CVE-2019-5475

The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability...

Central Security Project: OS Command Injection in Nexus Repository Manager 2.x

Maven artifact groupId: org.sonatype.nexus.plugins artifactId: nexus-yum-repository-plugin version: 2.14.9-01 Vulnerability Vulnerability Description The Nexus Yum Repository Plugin is vulnerable to Remote Code Execution. All instances using CommandLineExecutor.java with user-supplied data is...