GHSA-hmjv-px3j-933c
Unrestricted Upload of File with Dangerous Type in Sonatype Nexus Repository Manager
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.sonatype.nexus:nexus-repository | >= 2.0.0, < 2.14.15 | 2.14.15 |
| Maven | org.sonatype.nexus:nexus-repository | >= 3.0.0, < 3.19.0 | 3.19.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution.
References
External links from the advisory. They lead to third-party sites.