Last year, I committed to uncovering critical vulnerabilities in Maven repositories. Now it’s time to share the findings: RCE in Sonatype Nexus, Cache Poisoning in JFrog Artifactory, and more! https://github.blog/security/vulnerability-research/attacks-on-maven-proxy-repositories/
Comments