CVE-2019-5475

Description

The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

79.317

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2019-5475 are fixed in Sonatype - nexus-yum-repository-plugin 2.14.14	Windows
Vulnerabilities CVE-2019-5475 are fixed in Sonatype - nexus-yum-repository-plugin for Linux 2.14.14	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234