Remote Code Execution vulnerability discovered in Nexus Repository 2
CVE-2024-5082

Currently unrated

Key Information:

Vendor

Sonatype

Status
Nexus Repository
Vendor
CVE Published:
14 November 2024

What is CVE-2024-5082?

A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2. 

This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Nexus Repository 2.0.0 <= 2.15.1

References

https://support.sonatype.com/hc/en-us/articles/3069412538...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Michael Stepankin at GitHub Security Lab
JSON
.