← All advisories

Unrated severityOSV Advisory· Published Nov 15, 2018· Updated Aug 5, 2024

CVE-2018-16621

CVE-2018-16621

Description

Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Sonatype/NexusOSV
Range: release-3.3.0-01, release-3.4.0-02, release-3.5.0-02
Sonatype/Nexus Repositoryllm-fuzzy
Range: <3.14

Patches

Vulnerability mechanics

References

2

securitylab.github.com/advisories/GHSL-2020-015-nxrm-sonatypemitrex_refsource_MISC
support.sonatype.com/hc/en-us/articles/360010789153-CVE-2018-16621-Nexus-Repository-Manager-Java-Injection-October-17-2018mitrex_refsource_CONFIRM

News mentions

0

No linked articles in our index yet.