CVE-2020-10199highunder attackCWE-917

CVE-2020-10199

Published · Updated

Follow this CVE+ Monitor Nexus Repository+ Monitor org.sonatype.nexus:nexus-extdirect

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 8.8epss 99%
from disclosure to weapon6 days
Published on NVDApr 1
1st PoC+6d
metasploitMar 31
CISA KEV+581d
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

Nexus Repository before version 3.21.2 has a vulnerability where attackers can inject malicious Java Expression Language (JavaEL) code, potentially executing arbitrary commands on the server.

Technical detail

This JavaEL injection vulnerability (CWE-917) in Nexus Repository < 3.21.2 allows unauthenticated or low-privileged attackers to inject arbitrary expressions that are evaluated server-side, leading to remote code execution. The vulnerability stems from insufficient input validation on user-supplied data processed through EL evaluation contexts.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.