CVE-2014-0792
Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vectors related to unmarshalling of unintended Object types.
- EPSS
- 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
- CWE
- CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sonatype:nexus
References
- http://www.sonatype.org/advisories/archive/2014-01-13-Nexus
- https://sonatype.zendesk.com/entries/37551958-Configuring-Xstream-Whitelist
- https://support.sonatype.com/entries/37828023-Nexus-Security-Vulnerability
- http://www.sonatype.org/advisories/archive/2014-01-13-Nexus
- https://sonatype.zendesk.com/entries/37551958-Configuring-Xstream-Whitelist