CVE-2020-10204
1 advisory.
Maven/org.sonatype.nexus:nexus-core CVE-2020-10204: high 8.8
Remote Code Execution - JavaEL Injection (low privileged accounts) in Nexus Repository Manager
Action: Upgrade org.sonatype.nexus:nexus-core to 3.21.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.21.2 | - |
Fixed versions
| 3.21.2 |
Sources
- osv: GHSA-8h56-v53h-5hhj
- https://nvd.nist.gov/vuln/detail/CVE-2020-10204
- https://securitylab.github.com/advisories/GHSL-2020-011-nxrm-sonatype
- https://securitylab.github.com/advisories/GHSL-2020-012-nxrm-sonatype
- https://support.sonatype.com/hc/en-us/articles/360044356194
- https://support.sonatype.com/hc/en-us/articles/360044882533
CVE-2020-10204 · published · modified · JSON