CVE-2019-5475

The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability.

Score

CVSS 3.0 8.8 High

Status

Modified - support@hackerone.com

Published

2019-09-03

Last modified

2024-08-04

Weaknesses

CWE-78

Affected products

• Nexus Repository Manager (Sonatype)

References

• https://hackerone.com/reports/654888