CVE-2020-10204 PoC — Sonatype Nexus Repository 输入验证错误漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10204.yaml

Associated Vulnerability

Title: Sonatype Nexus Repository 输入验证错误漏洞 (CVE-2020-10204)
Description:Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution.

Description

Sonatype Nexus Repository Manager 3 up to and including 3.21.1 is vulnerable to Expression Language injection. An attacker authenticated with an administrative account can inject an EL expression into the user "roles" field of the coreui_User update endpoint, leading to remote code execution. This is a bypass of the fix for CVE-2018-16621.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →