CVE-2014-9389

概要

参考情報

• secunia.com/advisories/61134
• sonatype.org/advisories/archive/2014-12-23-Nexus · Patch
• support.sonatype.com/entries/84705937-CVE-2014-9389-Nexus-Security-Advisory-Directory-Traversal · Patch

nexus のその他の脆弱性

• CVE-2020-24622中 4.9In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user.
• CVE-2020-11444高 8.8Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control.
• CVE-2020-10204高 7.2Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution.
• CVE-2020-10203中 4.8Sonatype Nexus Repository before 3.21.2 allows XSS.
• CVE-2020-10199高 8.8悪用確認済み（CISA KEV）Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).