Description
Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 7 repositories
-
mpgn/CVE-2019-7238 ★ 154 · Feb 24, 2019
🐱💻 Poc of CVE-2019-7238 - Nexus Repository Manager 3 Remote Code Execution 🐱💻
-
jas502n/CVE-2019-7238 ★ 85 · May 21, 2019
Nexus Repository Manager 3 Remote Code Execution without authentication < 3.15.0
-
verctor/nexus_rce_CVE-2019-7238 ★ 38 · Jul 26, 2019
Some debug notes and exploit(not blind)
-
magicming200/CVE-2019-7238_Nexus_RCE_Tool ★ 25 · Jan 10, 2020
CVE-2019-7238 Nexus RCE漏洞图形化一键检测工具。CVE-2019-7238 Nexus RCE Vul POC Tool.
-
DannyRavi/nmap-scripts ★ 2 · Apr 20, 2025
nmap scripts for vuln cve-2020-0796 & cve-2019-7238 & cve2019-11580 & cve2017-6327
-
smallpiggy/CVE-2019-7238 ★ 1 · May 20, 2021
RCE
-
CyberCTF/vulhub-nexus-cve-2019-7238 ★ 0 · Oct 8, 2026
Vulhub nexus/CVE-2019-7238: Nexus Repository Manager 3 JEXL Injection RCE (CVE-2019-7238), run with Isoloom
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Sonatype Nexus Repository Manager <3.15.0 - Remote Code Execution http/cves/2019/CVE-2019-7238.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.