Nexus Repository Manager Improper Neutralization of Special Elements used in an Expression Language Statement (Expression Language Injection) Vulnerability - CVE-2018-16621 - Vulnerability Database

Nexus Repository Manager Improper Neutralization of Special Elements used in an Expression Language Statement (Expression Language Injection) Vulnerability - CVE-2018-16621

High

Reference: CVE-2018-16621

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2018-16621

Title: Nexus Repository Manager Improper Neutralization of Special Elements used in an Expression Language Statement (Expression Language Injection) Vulnerability

Overview:

Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection.