Description
Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection.
Remediation
References
Related Vulnerabilities
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-3829)
WordPress Plugin NEX-Forms-Ultimate Form builder Multiple SQL Injection Vulnerabilities (4.0)
SharePoint URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-1323)
WordPress Plugin WP Booking Calendar Multiple Vulnerabilities (3.0.0)