CVE-2019-5475
1 advisory.
Maven/org.sonatype.nexus.plugins:nexus-yum-repository-plugin CVE-2019-5475: high 8.8
OS Command Injection in Nexus Yum Repository Plugin
Action: Upgrade org.sonatype.nexus.plugins:nexus-yum-repository-plugin to 2.14.14 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.14.14 | - |
Fixed versions
| 2.14.14 |
Sources
- osv: GHSA-g5m7-57ph-j6p8
- https://nvd.nist.gov/vuln/detail/CVE-2019-5475
- https://hackerone.com/reports/654888
CVE-2019-5475 · published · modified · JSON