CVE-2020-10199 PoC — Sonatype Nexus Repository Manager 安全漏洞

Source

https://github.com/hugosg97/CVE-2020-10199-Nexus-3.21.01

Associated Vulnerability

Title: Sonatype Nexus Repository Manager 安全漏洞 (CVE-2020-10199)
Description:Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).

Description

Sonatype Nexus 3.21.01 - Remote Code Execution (Authenticated - Updated)

Readme

# CVE-2020-10199-Nexus-3.21.01
Sonatype Nexus 3.21.01 - Remote Code Execution (Authenticated - Updated)

This version is based from Alvaro Muñoz 49385 and from metasploit nexus exploit
https://www.exploit-db.com/exploits/49385

Change the user,password,URL and CMD

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →