GHSA-g5m7-57ph-j6p8

ghsaUSosv

OS Command Injection in Nexus Yum Repository Plugin

view advisory published 2019-09-11Licence: CC-BY-4.0

The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-5475US	high8.8	18.4% (97th)	Exploit	2019-09-03
The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configurati…

references

External citations — patches, advisories, analysis.

https://hackerone.com/reports/654888WEB
https://nvd.nist.gov/vuln/detail/CVE-2019-5475ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan