Product
An authenticated remote code execution vulnerability in Sonatype Nexus Repository Manager 2 (up to 2.15.1) allows attackers to execute arbitrary code by uploading a malicious Maven artifact containing an evaluated Velocity template.