RCE in Sonatype Nexus
CVE-2014-0792
Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vectors related to unmarshalling of unintended Object types.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.028 (85.0th percentile) — read the EPSS interpretation.
Affected products
- Sonatype Nexus — versions 1.0, 2.0, 2.0.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM)