CVE-2019-5475CWE-78

CVE-2019-5475: vulnerability in Nexus Repository Manager

Published · Updated

Follow this CVE+ Monitor Nexus Repository Manager+ Monitor org.sonatype.nexus.plugins:nexus-yum-repository-plugin

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 18%
The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability.
Affected products
n/a · Nexus Repository Manager