{"action":"Upgrade org.sonatype.nexus:nexus-extdirect to 3.21.2 or later.","affected":[{"fixed":"3.21.2","introduced":"0"}],"component":"org.sonatype.nexus:nexus-extdirect","cve_ids":["CVE-2020-10199"],"ecosystem":"Maven","epss":0.99064,"exploited":true,"fixed_versions":["3.21.2"],"ghsa_id":"GHSA-g2f6-v5qh-h2mq","id":"tcs_01M5N8X2GNDNRDJ8ZFHVS0F5FK","modified_at":"2025-10-22T19:17:19.496144Z","published_at":"2020-04-14T15:27:05Z","references":["https://osv.dev/vulnerability/GHSA-g2f6-v5qh-h2mq","https://nvd.nist.gov/vuln/detail/CVE-2020-10199","https://cwe.mitre.org/data/definitions/917.html","https://github.com/sonatype/nexus-public","https://securitylab.github.com/advisories/GHSL-2020-015-nxrm-sonatype","https://support.sonatype.com/hc/en-us/articles/360044882533","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-10199","http://packetstormsecurity.com/files/157261/Nexus-Repository-Manager-3.21.1-01-Remote-Code-Execution.html","http://packetstormsecurity.com/files/160835/Sonatype-Nexus-3.21.1-Remote-Code-Execution.html"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-g2f6-v5qh-h2mq","url":"https://osv.dev/vulnerability/GHSA-g2f6-v5qh-h2mq"},{"source":"kev","source_id":"CVE-2020-10199","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}],"summary":"Nexus Repository Manager 3 - Remote Code Execution"}