Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection
id: CVE-2020-10199 info: name: Sonatype Nexus Repository Manager 3 - Remote Code Execution auth ...