Back to the CVE list
CVE-2019-7238 CISA KEV · Actively exploited

Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability

CVSS score

—

EPSS probability

%76.6

Risk score

—

Published

4 y ago

OverviewPublic Exploits (7)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
mpgn/CVE-2019-7238
GitHub

🐱‍💻 Poc of CVE-2019-7238 - Nexus Repository Manager 3 Remote Code Execution 🐱‍💻 (★149)

Public PoCSource updated: 13.04.2022 13:55:29
G
jas502n/CVE-2019-7238
GitHub

Nexus Repository Manager 3 Remote Code Execution without authentication < 3.15.0 (★70)

Public PoCSource updated: 16.05.2022 14:37:31
G
verctor/nexus_rce_CVE-2019-7238
GitHub

Some debug notes and exploit(not blind) (★38)

Public PoCSource updated: 20.12.2021 13:53:58
G
magicming200/CVE-2019-7238_Nexus_RCE_Tool
GitHub

CVE-2019-7238 Nexus RCE漏洞图形化一键检测工具。CVE-2019-7238 Nexus RCE Vul POC Tool. (★21)

Public PoCSource updated: 29.01.2022 00:37:18
G
smallpiggy/CVE-2019-7238
GitHub

RCE (★1)

Public PoCSource updated: 20.05.2021 23:48:35
G
CyberCTF/vulhub-nexus-cve-2019-7238
GitHub

Vulhub nexus/CVE-2019-7238: Nexus Repository Manager 3 JEXL Injection RCE (CVE-2019-7238), run with Isoloom (★0)

Public PoCSource updated: 09.10.2026 08:12:10
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7238.yaml
Nuclei

Nuclei: Sonatype Nexus Repository Manager <3.15.0 - Remote Code Execution

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2019-7238"