GHSL-2020-015: Remote Code Execution - Bypass of CVE-2018-16621 mitigations in Nexus Repository Manager

Published Apr 13, 2020

Updated

GHSL-2020-015 - Remote Code Execution - Bypass of CVE-2018-16621 mitigations

Affected Software

1 affected component

Sonatype Nexus Repository Manager

Apr 13, 2020

Advisory Published

via GitHub Security Lab·12:00 AM

Data Sourced

via GitHub Security Lab·12:00 AM

Description

GHSL-2020-015 has a high severity rating of 89, indicating a critical risk level.

GHSL-2020-015 allows for remote code execution by bypassing previous mitigations of CVE-2018-16621 within the Nexus Repository Manager.

To mitigate GHSL-2020-015, ensure that you upgrade to the latest patched version of Sonatype Nexus Repository Manager as per the vendor's guidance.

GHSL-2020-015 affects Sonatype Nexus Repository Manager.

GHSL-2020-015 was published on April 13, 2020.