CVE-2024-5082
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Nov 14, 2024
Updated: Nov 15, 2024
CWE ID 94
Summary
CVE-2024-5082 is a newly disclosed Remote Code Execution (RCE) vulnerability impacting Sonatype Nexus Repository 2. This issue poses a significant risk for Nexus Repository 2 OSS/Pro users as it allows an unauthenticated attacker to execute arbitrary code on affected systems. Versions up to and including 2.15.1 are reported to be vulnerable. Users are strongly advised to update their installations as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.