CVE-2014-0792 in Sonatype Nexus
Summary
Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vectors related to unmarshalling of unintended Object types.
Reservation
01/03/2014
Disclosure
01/17/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 66110 | Sonatype Nexus code injection | 94 | Not defined | Official fix | CVE-2014-0792 |