CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-03-21
Sonatype Nexus Repository Manager 3 Missing Access Control and Remote Code Execution (RCE) Vulnerability (CVE-2019-7238) Analysis & Remediation Guide
[Affected Scope] Sonatype Nexus Repository Manager versions prior to 3.15.0
[Impact] Unauthenticated remote attackers can execute arbitrary Groovy scripts and gain full system-level control by sending specially crafted HTTP POST requests
[Mitigation] Immediately upgrade to the latest stable version (3.15.0 or higher) or restrict external access to the vulnerable endpoints