CVE-2020-10199_CVE-2020-10204

迈萌CVE-2020-10199、CVE-2020-10204漏洞检测工具 工具介绍 抽空用java写了这个小工具，支持一键检测CVE-2020-10199、CVE-2020-10204漏洞，图形化界面，为确保检测稳定性，payload用到了随机数。该工具仅限安全从业者在法律法规允许的范围内使用，违规使用后果自负。 运行截图 使用方式 1. 登录进入后台； 2. 获取登录后的cookie及scrf属性； 3. 打开本工具，填写相关信息，点击检测即可。 运行环境 跨平台，JRE=1.6。 漏洞背景 Sonatype Nexus 是一个 Maven...

Sonatype Nexus Repository Manager 3 - Remote Code Execution

Sonatype Nexus Repository Manager 3 up to and including 3.21.1 is vulnerable to Expression Language injection. An attacker authenticated with an administrative account can inject an EL expression into the user "roles" field of the coreuiUser update endpoint, leading to remote code execution. This...

CVE-2020-10204

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution...

Exploit for Expression Language Injection in Sonatype Nexus

Nexus Repository Manager 3 Vuln 影响版本：= 3.21.2 CVE-2020-10199、CVE-2020-10204、CVE-2020-11444 CVE-2020-10199 远程代码命令执行 回显poc 不回显poc $\A''.getClass.forName'java.lang.Runtime'.getMethods6.invokenull.exec'touch /tmp/cve-2020-10199' 普通用户权限 /service/rest/beta/repositories/go/group 需要管理员权限 1...

Exploit for Improper Input Validation in Sonatype Nexus

PoC exploit for CVE-2020-10204, a remote command execution vulne...

CVE-2020-10204

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution...

CVE-2020-10204

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution...

CVE-2020-10204

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution. Recent assessments: ericalexanderorg at April 03, 2020 1:18pm UTC reported: Wording on this and eludes to an authenticated RCE, but they consider an anonymous user authenticated. Nexus servers store artifacts that could be...