Skip to content
OpenAdvisories
High WID-SEC-2024-3467 2 CVEs

Sonatype Nexus Repository Manager: Mehrere Schwachstellen

Published Nov 13, 2024 · Updated Nov 13, 2024 · de-DE

Vendor: Sonatype Product: Nexus Repository Manager Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Sonatype Nexus Repository Manager ausnutzen, um beliebigen Programmcode auszuführen oder einen Cross-Site-Scripting-Angriff durchzuführen.

Product

Sonatype Nexus Repository Manager ist ein Verwaltungstool für Software-Bestandteile.

Vulnerabilities 2

  • High 7.1
    CVE-2024-5082 Public exploit Scanner template

    Nexus Repository 2 - Remote Code Execution

    A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2.  This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1.

    Sonatype Nexus Repository
  • Medium 5.1
    CVE-2024-5083 Public exploit

    Nexus Repository 2 - Stored XSS

    A stored Cross-site Scripting vulnerability has been discovered in Sonatype Nexus Repository 2 This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1.

    Sonatype Nexus Repository

Revision history

  1. #1

    Initiale Fassung

References