CVE-2020-10199
Yüksek CISA KEV: Aktif İstismarTeknik Veri (Otomatik)
- CVSS Skoru
- 8.8
- EPSS
- 99.1%
- CWE
- CWE-917
- KEV Durumu
- Evet
Yayım tarihi: 1 Nisan 2020 · CISA KEV son iyileştirme tarihi: 3 Mayıs 2022
Etkilenen: sonatype nexus
Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).
Referanslar
- http://packetstormsecurity.com/files/157261/Nexus-Repository-Manager-3.21.1-01-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/160835/Sonatype-Nexus-3.21.1-Remote-Code-Execution.html
- https://cwe.mitre.org/data/definitions/917.html
- https://support.sonatype.com/hc/en-us/articles/360044882533
- http://packetstormsecurity.com/files/157261/Nexus-Repository-Manager-3.21.1-01-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/160835/Sonatype-Nexus-3.21.1-Remote-Code-Execution.html
Bu CVE için henüz editoryal inceleme yapılmadı. Sadece otomatik teknik veri gösteriliyor.