CVE-2020-10748 Nexus Repository 3 - Remote Code Execution 漏洞概述 Nexus Repository Manager 3 存在远程代码执行漏洞。该漏洞允许攻击者通过构造恶意请求，在服务器上执行任意命令。 影响范围 Nexus Repository Manager 3.14.0 到 3.17.0 Nexus Repository Manager 3.13.0 到 3.13.1 修复方案 升级到 Nexus Repository Manager 3.17.1 或更高版本。 POC代码 ```python import requests import sys def exploit(url): payload = "jython" data = { "name": "test", "type": "raw", "format": "raw", "strict": "true", "checksumPolicy": "ignore", "exposed": "true", "exposedPath": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "test", "content": "test", "contentType": "application/octet-stream", "repository": "test", "path": "