CVE-2019-16530 - Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution

HIGH

Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution

Published Oct 21, 2019

7.2

HIGH

CVSS 3.1

EPSS 3.34%

Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution.

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-4177		Advisory
https://github.com/advisories/GHSA-hmjv-px3j-933c		Advisory
https://issues.sonatype.org/secure/ReleaseNote.jspa		x_refsource_MISCRelease Notes
https://nvd.nist.gov/vuln/detail/CVE-2019-16530
https://support.sonatype.com/hc/en-us/articles/360036132453		x_refsource_CONFIRMPatchVendor Advisory