CVE-2020-11444

概要

参考情報

• support.sonatype.com · Vendor Advisory
• support.sonatype.com/hc/en-us/articles/360046133553 · Patch

nexus のその他の脆弱性

• CVE-2020-24622中 4.9In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user.
• CVE-2020-10204高 7.2Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution.
• CVE-2020-10203中 4.8Sonatype Nexus Repository before 3.21.2 allows XSS.
• CVE-2020-10199高 8.8悪用確認済み（CISA KEV）Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).
• CVE-2014-9389高 7.5Directory traversal vulnerability in Sonatype Nexus OSS and Pro before 2.11.1-01 allows remote attackers to read or write to arbitrary files…