Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2019-5475

The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability.

VectorNETWORK

PublishedSep 03, 2019, 20:15

Published Bysupport@hackerone.com

Base Score

Score8.8

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.sonatype.nexus.plugins:nexus-yum-repository-plugin(Maven)02.14.14N/A

References

https://hackerone.com/reports/654888

Weakness Type

CWE-78

CVSS Metrics

Base Score

8.8

Vector String

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base SeverityHigh

Version

3.0

Attack Vector (AV)

NETWORK