High · 7.2 CVE-2019-16530 EUVD-2022-4177GHSA-hmjv-px3j-933c

Unrestricted Upload of File with Dangerous Type in Sonatype Nexus Repository Manager

Published Oct 21, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution.

Ecosystem	Package	Affected	Fixed	Record
Maven	org.sonatype.nexus:nexus-repository	>= 2.0.0, < 2.14.15	2.14.15	GHSA-hmjv-px3j-933c
Maven	org.sonatype.nexus:nexus-repository	>= 3.0.0, < 3.19.0	3.19.0	GHSA-hmjv-px3j-933c