CVSS 3.1
7.2 highCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2020-10204
High (7.2) in sonatype nexus. EPSS 38% chance of exploitation in the next 30 days. Fixed in org.sonatype.nexus:nexus-core 3.21.2.
Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution.
Severity
- EPSS
- 38% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sonatype:nexus
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-8h56-v53h-5hhj | Maven | org.sonatype.nexus:nexus-core | <3.21.2 | 3.21.2 |