
CVE-2019-7238 Nexus RCE漏洞图形化一键检测工具。CVE-2019-7238 Nexus RCE Vul POC Tool.
I wrote this small tool in Java in my spare time. It supports one-click detection of the CVE-2019-7238 vulnerability and execution of system commands, with both GUI and command-line usage. This tool is restricted to security practitioners within the scope permitted by laws and regulations; users are solely responsible for any misuse.
Double-click cve-2019-7238.jar or run java -jar cve-2019-7238.jar
java -jar cve-2019-7238.jar http://127.0.0.1:8081 id
java -jar cve-2019-7238.jar http://127.0.0.1:8081 "ls -al"
Cross-platform, JRE>=1.6.

On February 5, 2019, Sonatype released a security advisory stating that in Nexus Repository Manager 3, due to insufficient access control measures, unauthorized users could exploit this flaw to craft specific requests to execute Java code on the server, thereby achieving remote code execution.
Upgrade Nexus Repository Manager OSS/Pro to 3.15.0 or later.