CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-04-01
Sonatype Nexus Repository Manager 3 Java Expression Language (EL) Injection Remote Code Execution Vulnerability (CVE-2020-10199) Analysis and Mitigation Guide
[Affected Scope] Sonatype Nexus Repository Manager versions prior to 3.21.2
[Impact] An authenticated attacker with low privileges can execute arbitrary system commands on the server by sending a specially crafted request.
[Mitigation] Immediately upgrade Nexus Repository Manager to the latest stable version (3.21.2 or higher).