Link | Resource |
---|---|
https://support.sonatype.com/hc/en-us/articles/360010789153-CVE-2018-16621-Nexus-Repository-Manager-Java-Injection-October-17-2018 | Patch Vendor Advisory |
https://securitylab.github.com/advisories/GHSL-2020-015-nxrm-sonatype | Exploit Third Party Advisory |
Configuration 1
|
Published : 2018-11-15 08:29
Updated : 2021-03-04 09:06
NVD link : CVE-2018-16621
Mitre link : CVE-2018-16621
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')