Firetruck

CVE-2020-10199

KEV

Sonatype Nexus Repository Remote Code Execution Vulnerability

View CVE record →
Vendor / Project
Sonatype
Product
Nexus Repository
Date added
Nov 3, 2021
Due date
May 3, 2022
Known ransomware use
Unknown
CWEs
CWE-917

Description

Sonatype Nexus Repository contains an unspecified vulnerability that allows for remote code execution.

Required action

Apply updates per vendor instructions.

Notes