CVE-2014-2034

Mô tả

Tham khảo

• secunia.com/advisories/57142 · Vendor Advisory
• osvdb.org/104049
• securityfocus.com/bid/65956
• sonatype.org/advisories/archive/2014-03-03-Nexus · Vendor Advisory
• support.sonatype.com/entries/42374566-CVE-2014-2034-Nexus-Security-Advisory-REST-API · Vendor Advisory

Lỗ hổng khác của nexus

• CVE-2020-24622TRUNG BÌNH 4.9In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user.
• CVE-2020-11444CAO 8.8Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control.
• CVE-2020-10204CAO 7.2Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution.
• CVE-2020-10203TRUNG BÌNH 4.8Sonatype Nexus Repository before 3.21.2 allows XSS.
• CVE-2020-10199CAO 8.8ĐANG BỊ KHAI THÁC (CISA KEV)Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).