CVE-2019-16530

HIGH7.2EPSS 3.8%

Unrestricted Upload of File with Dangerous Type in Sonatype Nexus Repository Manager

Published: 5/24/2022Modified: 11/8/2023

Description

Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH7.2CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References (3)