CVE-2018-16621 - Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection

HIGH

Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection

Published Nov 15, 2018

7.2

HIGH

CVSS 3.1

EPSS 5.16%

Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection.

No remediation recorded yet.

Weaknesses (1)

CWE-917

Expression Language Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-8428		Advisory
https://securitylab.github.com/advisories/GHSL-2020-015-nxrm-sonatype		x_refsource_MISCExploitThird Party Advisory
https://support.sonatype.com/hc/en-us/articles/360010789153-CVE-2018-16621-Nexus-Repository-Manager-Java-Injection-October-17-2018		x_refsource_CONFIRMPatchVendor Advisory