[org.sonatype.nexus:nexus-repository] Unrestricted Upload of File with Dangerous Type in Sonatype Nexus Repository Manager

Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution.

References

• https://nvd.nist.gov/vuln/detail/CVE-2019-16530
• https://issues.sonatype.org/secure/ReleaseNote.jspa
• https://support.sonatype.com/hc/en-us/articles/360036132453
• https://github.com/advisories/GHSA-hmjv-px3j-933c