CVE-2024-5082

A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2.  This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1.

Affected products

Nexus Repository Manager, Sonatype Nexus Repository

Fix

Available

CVSS 4.0

7.1 HIGH

EPSS

1.9% (79th percentile)

Weakness

CWE-94

NVD status

Deferred

Published

2024-11-14