{"action":"Upgrade org.sonatype.nexus:nexus-repository to 2.14.15 (2.x) or 3.19.0 (3.x) or later.","affected":[{"fixed":"2.14.15","introduced":"2.0.0"},{"fixed":"3.19.0","introduced":"3.0.0"}],"component":"org.sonatype.nexus:nexus-repository","cve_ids":["CVE-2019-16530"],"ecosystem":"Maven","epss":0.03343,"exploited":false,"fixed_versions":["2.14.15","3.19.0"],"ghsa_id":"GHSA-hmjv-px3j-933c","id":"tcs_01M5N90YG0MX4H3H4WXKN36QGM","modified_at":"2023-11-08T04:01:17.983202Z","published_at":"2022-05-24T16:59:30Z","references":["https://osv.dev/vulnerability/GHSA-hmjv-px3j-933c","https://nvd.nist.gov/vuln/detail/CVE-2019-16530","https://issues.sonatype.org/secure/ReleaseNote.jspa","https://support.sonatype.com/hc/en-us/articles/360036132453"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-hmjv-px3j-933c","url":"https://osv.dev/vulnerability/GHSA-hmjv-px3j-933c"}],"summary":"Unrestricted Upload of File with Dangerous Type in Sonatype Nexus Repository Manager"}