Description
The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability.
Remediation
References
https://hackerone.com/reports/654888
Related Vulnerabilities
CVE-2022-21126 Vulnerability in maven package com.github.samtools:htsjdk
CVE-2023-22580 Vulnerability in npm package sequelize
CVE-2022-26850 Vulnerability in maven package org.apache.nifi:nifi-single-user-utils
CVE-2023-38889 Vulnerability in maven package org.alluxio:alluxio-core
CVE-2023-1108 Vulnerability in maven package io.undertow:undertow-core