Description
Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution.
Remediation
References
https://issues.sonatype.org/secure/ReleaseNote.jspa
https://support.sonatype.com/hc/en-us/articles/360036132453
Related Vulnerabilities
CVE-2020-36629 Vulnerability in npm package httpster
CVE-2023-22457 Vulnerability in maven package org.xwiki.contrib:application-ckeditor-plugins
CVE-2023-29198 Vulnerability in npm package electron
CVE-2019-10754 Vulnerability in maven package org.apereo.cas:cas-server-core-services-api
CVE-2022-25647 Vulnerability in maven package com.google.code.gson:gson