CVE-2020-10199 PoC — Sonatype Nexus Repository Manager 安全漏洞

Source

https://github.com/hugosg97/CVE-2020-10199-Nexus-3.21.01

Associated Vulnerability

Title:Sonatype Nexus Repository Manager 安全漏洞 (CVE-2020-10199)
Description:Sonatype Nexus Repository Manager（NXRM）是美国Sonatype公司的一款Maven仓库管理器。 Sonatype Nexus Repository Manager 3.21.2之前版本中存在安全漏洞。攻击者可借助恶意的请求利用该漏洞执行任意代码。

Description

Sonatype Nexus 3.21.01 - Remote Code Execution (Authenticated - Updated)

Readme

# CVE-2020-10199-Nexus-3.21.01
Sonatype Nexus 3.21.01 - Remote Code Execution (Authenticated - Updated)

This version is based from Alvaro Muñoz 49385 and from metasploit nexus exploit
https://www.exploit-db.com/exploits/49385

Change the user,password,URL and CMD

File Snapshot


 [4.0K]  /data/pocs/6957197f1ac5a2b13c310afc367d0863fdbe255b
├── [1.4K]  exploit.py
└── [ 266]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!