-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability (CWE-434) involves unrestricted file uploads leading to RCE. Without patch details, we infer: 1) Upload handling functions would lack file type validation 2) Storage functions would persist dangerous files 3) REST endpoints would accept malicious payloads. These functions represent the critical path where unvalidated uploads would be processed. Confidence is medium as analysis is based on vulnerability pattern matching rather than explicit patch code.
Ongoing coverage of React2Shell
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.sonatype.nexus:nexus-repository | maven | >= 2.0.0, < 2.14.15 | 2.14.15 |
| org.sonatype.nexus:nexus-repository | maven | >= 3.0.0, < 3.19.0 | 3.19.0 |
JavaJava