Description

The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability.

Remediation

References

https://hackerone.com/reports/654888

Related Vulnerabilities

CVE-2022-39250 Vulnerability in npm package matrix-js-sdk

CVE-2021-30246 Vulnerability in maven package org.webjars.npm:jsrsasign

CVE-2020-8125 Vulnerability in npm package klona

CVE-2017-16008 Vulnerability in npm package i18next

CVE-2021-30246 Vulnerability in npm package jsrsasign

Severity

Critical

Classification

CWE-78 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Third Party Advisory