CVE-2020-15012
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2020-15012
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-15012.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2020-15012
- Published
- 2020-10-12T21:15:13.010Z
- Modified
- 2025-11-14T10:49:37.338627Z
- Severity
-
- 8.6 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19. A user that requests a crafted path can traverse up the file system to get access to content on disk (that the user running nxrm also has access to).
- References
Affected packages
Git / github.com/sonatype/nexus-public
Affected ranges
- Type
- GIT
- Repo
- https://github.com/sonatype/nexus-public
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
release-2.*
release-2.14.10-01
release-2.14.11-01
release-2.14.12-02
release-2.14.13-01
release-2.14.14-01
release-2.14.15-01
release-2.14.16-01
release-2.14.4-02
release-2.14.4-03
release-2.14.5-02
release-2.14.9-01
Database specific
vanir_signatures
[
{
"target": {
"file": "plugins/security/nexus-ldap-realm-plugin/src/test/java/org/sonatype/nexus/NexusLdapTestSupport.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"86981555547745712411182944570340080357",
"138898036409421196506122450431295122109",
"9591357287506367380770753623328129533",
"28310614099614702653866932294870109317",
"133729019490604691503466611371147003399",
"223274146186421459126887867514261033510",
"324597800782793452274240808311126162503",
"165675747002161261255176703093156320685",
"597804094778853918532979370674950274",
"239048364920442053515469553151886960594",
"328922407652037623018865110540658016320",
"219210566278897287557369211458535096051"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-028ebb9d",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/maven2/M2GroupRepository.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"301439788949418071801766888321233665611",
"51596881030188640827758785251507549196",
"18267891371733978054075270005859714309",
"177943566918430938741632112539922720518",
"182728767708398219824312774627790455550"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-041c13f4",
"signature_version": "v1"
},
{
"target": {
"file": "testsuite/legacy-testsuite/src/test/java/org/sonatype/nexus/testsuite/ldap/nxcm147/Nxcm147SavedPasswordConnectionJsonIT.java",
"function": "connectionTestWithFakePassword"
},
"signature_type": "Function",
"digest": {
"length": 1707.0,
"function_hash": "197144728641112435130326816728462123760"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-056527d6",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/LayoutConverterShadowRepository.java",
"function": "storeItemWithChecksums"
},
"signature_type": "Function",
"digest": {
"length": 1167.0,
"function_hash": "43489160364973273438831955507108826918"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-0808f08a",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/ChecksumContentValidator.java",
"function": "isChecksum"
},
"signature_type": "Function",
"digest": {
"length": 111.0,
"function_hash": "308407641330048547694247496000257257799"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-0d4ca600",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/test/java/org/sonatype/nexus/proxy/storage/remote/httpclient/HttpClientManagerTest.java",
"function": "enableCircularRedirectsForHosts"
},
"signature_type": "Function",
"digest": {
"length": 1698.0,
"function_hash": "240645833721311142931188455201698130904"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-10b055b4",
"signature_version": "v1"
},
{
"target": {
"file": "testsuite/modern-testsuite/src/test/java/org/sonatype/nexus/testsuite/routing/RoutingSanityIT.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"257463456077024846397483781880213451235",
"7829308363652557466283814297362189800",
"85522858717171682583471968426454723280",
"274512931955911907272747244466553149534"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-13846f08",
"signature_version": "v1"
},
{
"target": {
"file": "plugins/security/nexus-ldap-realm-plugin/src/main/java/org/sonatype/nexus/security/ldap/realms/test/api/LdapUserAndGroupConfigTestPlexusResource.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"337292999257030301995547166643228680045",
"66759614147349769575237312688118647888",
"130039926844918441426469041557339354073",
"2441115962179044294038702986940917231",
"67033778631094604664925120294731288518",
"147935754953463013180335811718389290611",
"302507516099481240891020680188249938979",
"2426180230470377667687938366976049923",
"303930312423146421718823081141445846952",
"128828440205874627595277229762924718368",
"156001098977200925507359159537656554090",
"19748843971831624905393684739387683081",
"74644176691881472348070729612989020243"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-13ef6881",
"signature_version": "v1"
},
{
"target": {
"file": "testsuite/legacy-testsuite/src/test/java/org/sonatype/nexus/testsuite/ldap/LdapConnMessageUtil.java",
"function": "validateResourceResponse"
},
"signature_type": "Function",
"digest": {
"length": 755.0,
"function_hash": "101003615292824895442390968998071524867"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-14f536fb",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/metadata/AbstractMetadataHelper.java",
"function": "isChecksumFile"
},
"signature_type": "Function",
"digest": {
"length": 168.0,
"function_hash": "11035438404365364036099939187894450413"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-1608e30e",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/test/java/org/sonatype/nexus/proxy/maven/routing/internal/PrefixFileMaintenanceTest.java",
"function": "smoke"
},
"signature_type": "Function",
"digest": {
"length": 1564.0,
"function_hash": "129988666087693264849105626335599388371"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-1bf1f23a",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/item/StorageFileItem.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"326225226513215630445271567868072375581",
"249573214258062310856769595045726590915",
"311756842035724899646730217714886884681"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-237b351f",
"signature_version": "v1"
},
{
"target": {
"file": "testsuite/legacy-testsuite/src/test/java/org/sonatype/nexus/testsuite/misc/nexus421/Nexus421PlainNotificationIT.java",
"function": "testAutoBlockNotification"
},
"signature_type": "Function",
"digest": {
"length": 206.0,
"function_hash": "198856939401472080567237448991879447659"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-24fc3242",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/ArtifactStoreHelper.java",
"function": "deleteItemWithChecksums"
},
"signature_type": "Function",
"digest": {
"length": 696.0,
"function_hash": "290906158836509266146758410588239185423"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-2b2c5eb5",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/LayoutConverterShadowRepository.java",
"function": "storeItemWithChecksums"
},
"signature_type": "Function",
"digest": {
"length": 1236.0,
"function_hash": "101283338499530007146936341591148463416"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-2c0a6ade",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/AbstractMavenRepository.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"99109057245415287470135695439744855573",
"272259785650101010911863449701307896669",
"296695207463859093949599909174237720012",
"199370679815003495532844475995975328864",
"115491053454603826089374399356737833559",
"242107353043417626903397687986924846888",
"297554225962656682955657675905949485613",
"108783495020780193937877768039812636779",
"283640119076228171809942575053593648388",
"245233299699582626556816202647071733970",
"212733937111923919687971645125554106653",
"159264405149249818947408178100875248594",
"314399604238007328121826679024319395098",
"224631463108357843873772338070590670295",
"131338916708594296157036330549790614220",
"233176976731670399305079469861169137424",
"285044491256902285120125659265123154883",
"330841463093319782545281353107524281509",
"185013649149043120020058451806531147504",
"323433748713370473925746223093429102666",
"180096356527531021707154470979659311326",
"78725121005726426593413295975136918604",
"252451386087528687749656224597780543498",
"228543432120182957020968383127754312224",
"25504926725289912221251041531168911182",
"269323889399306338824816591008149127221",
"326523650584286265903969437139269972951",
"170419635722723815091129809055515531051",
"218297030592094573725100875450234298354",
"11336384457911805289601703584319843652",
"321955050440010069597508241972763595688",
"323385889832445509333565305146571426749",
"176773529341089651450917946809872717789",
"264319207579003813736572683729431549402",
"144632749963838454858397493191057821044",
"71631882984639626624143975870698017041",
"19665002506619547331514581304391129977"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-2e52968c",
"signature_version": "v1"
},
{
"target": {
"file": "testsupport/nexus-test-harness-launcher/src/main/java/org/sonatype/nexus/integrationtests/MavenVerifierHelper.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"36154398710401179399469910237234268179",
"217567070303244386307500693940184436339",
"337783925376695354837115980903317907964",
"153154282570817578589685481857037028730",
"17887781169321301513167116959678423242",
"48315428543199646586774622377406514372",
"122826859664113519752828357231254059282",
"17987084197544495331682315440727060422",
"86434469051012956011969367594849678931",
"205579455564456532580505916844059046793"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-2fbb8d5c",
"signature_version": "v1"
},
{
"target": {
"file": "testsuite/legacy-testsuite/src/test/java/org/sonatype/nexus/testsuite/ldap/LdapConnMessageUtil.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"139934212747441389806426012380887799349",
"67524143792404717612843240931359702344",
"279465435993179851396690510459637459535",
"50318463267833572003265280927093848397",
"231176317664927998953537167388663124844",
"39335967146356048659080498349485362096",
"19386847325197134851414902251331675988",
"165675747002161261255176703093156320685",
"23194090733627716654988184243967695364",
"226783710525870938612684730305950665737",
"169825404873750845532206862546652576311",
"289795353060690574323898009471965894448",
"134758790663708844773445237749298673582"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-2ff67605",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/AbstractMavenRepository.java",
"function": "storeItem"
},
"signature_type": "Function",
"digest": {
"length": 966.0,
"function_hash": "257946550852760892970323612171621696662"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-3390350e",
"signature_version": "v1"
},
{
"target": {
"file": "testsuite/legacy-testsuite/src/test/java/org/sonatype/nexus/testsuite/misc/nexus421/Nexus421PlainNotificationIT.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"82043193627118365738721614218741014049",
"233505075427726163236578551303599933726",
"160225661867460296192691436462730130273",
"39368266603541639483119902965822827303",
"122862609624316651976756847192494008380",
"56884259973345046302569446433236076206"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-35d4a537",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/attributes/inspectors/DigestCalculatingInspector.java",
"function": "maybeGetFromContext"
},
"signature_type": "Function",
"digest": {
"length": 453.0,
"function_hash": "259360113553897386309832253153707152406"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-3a9e8b85",
"signature_version": "v1"
},
{
"target": {
"file": "plugins/security/nexus-ldap-realm-plugin/src/test/java/org/sonatype/nexus/security/ldap/realms/api/LdapConnNotConfiguredIT.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"44103658024466109520663259511758204700",
"5182982591844288057918468589148360377",
"165722336973055065094828951317987049256",
"136037594182216190799582714919885214910",
"267361895918386439390618250924554956133",
"140192260631692863447754891321996524256",
"86033426418247168889575526290228050674",
"76995759372529742540174107389388095397",
"241454158443030366545037134852106079745",
"3157898033283847039875479392080512186",
"118782464630581564426898860439539332419",
"157274072646465477523158216480540904421",
"337022758785407217992062281987845464480",
"122538669567671617581088219841605921692",
"199390101286216014270295637647729471814",
"253238533980495192973837750495585014728",
"238074422151601444025989204273250490446",
"108245687688522174307236762987252648972",
"277901136001058571507981402433607765494",
"51053288662586684114172996500600155337",
"283281817440753462373796457686211760073",
"255462850935867372288453835100019433544",
"69704018596648077940136434890908955321",
"67685131695077019994577583556783422792",
"173864071663483441957626556499112640948",
"303926319903844591954727144502656065952",
"298886195797275120892286455474421770126",
"128570326097039629217413429952759025090"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-3c1cd785",
"signature_version": "v1"
},
{
"target": {
"file": "testsuite/modern-testsuite/src/test/java/org/sonatype/nexus/testsuite/routing/RoutingSanityIT.java",
"function": "prefixFileIsUnchanged"
},
"signature_type": "Function",
"digest": {
"length": 548.0,
"function_hash": "144936699398848969791316712941652340215"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-3df931e6",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/item/ChecksumReconciler.java",
"function": "shouldAttemptReconciliation"
},
"signature_type": "Function",
"digest": {
"length": 295.0,
"function_hash": "134566492653270991099057408220820708257"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-469c3cff",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/metadata/AbstractMetadataHelper.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"223980493336271259424779603115692748687",
"86796541484881088357566515235672029888",
"118749108369872965364613080507549765233",
"158180674492770376804122735421473961148",
"49541591283519932360064535859133592240",
"223008507847824948826648199719328059178",
"200752490482230012353050587765585226559",
"276695395194291027569323840379922119677",
"304144654213386834332989756903076157679",
"301967075112976040782752815358226348407",
"216007002428496155549201191806057468215",
"42973463113964275962516994466128284984",
"298586691859252510256456058080367893176",
"148536977143378054607640572325557454938",
"184290596539571001358153877633642456553",
"9729009909779991017128203387696656801",
"15532333744988218082875104023836518198",
"264583544183879883180571811862631012646"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-58fb7174",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/test/java/org/sonatype/nexus/AbstractMavenRepoContentTests.java",
"function": "copyDirectory"
},
"signature_type": "Function",
"digest": {
"length": 737.0,
"function_hash": "279819851965424168286033273962311937964"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-59fa641a",
"signature_version": "v1"
},
{
"target": {
"file": "testsuite/legacy-testsuite/src/test/java/org/sonatype/nexus/testsuite/ldap/nxcm147/Nxcm147SavedPasswordConnectionJsonIT.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"74179706170281141230376085081082265180",
"36693244957217804737486804362938525051",
"337643687695277597047954489411940345143",
"92763156934023304283378294217805360370",
"270651083374382457646221777931518676414",
"7502852390957789235349783799939373635",
"323984737538619261898432573536166842675",
"113043931424672195455835905456619129745",
"266511832789923797284914959172639599262",
"304940779241804395477713647011259707465",
"18815932684901283801880708772897418765",
"330491711938744386923006719634684791750",
"181209977201239431242281415364733883911",
"280260954177987407139486987489677316274",
"317001699359179359176271919493263519549",
"171554684416689929828854871821971439642",
"221933175003893593848791162218709177658",
"177849041328087435130823217776999701580",
"111733155060746791745808660723730824413",
"20950798054990369303651588996938909541",
"150118516822137992769882710507046423112",
"214534501030951139691342588279705786098",
"324252417402762074314195577997416149878",
"229758330699517025137931255020120731006",
"140160160000368531763574643171684163074",
"106054354303777795797143277275104440494",
"138006269496862630324060733165536701729",
"315273031432540774741158686399364817145",
"262819312484220082591326304971578016437",
"317689722580633724864191746411749774308",
"114117274146098685441340849257771721507",
"34625166226166952217770976091321669361",
"328059786183944695664939154302806217660",
"182888432165571502800687478115507939947",
"149713793178788264154888654775527798771",
"154037816546582310914940259490152672043",
"169993274886093128252394072849843837570",
"152641976418603597793211154769354027267",
"89810989154911024585567571106614756361",
"203397140537842285078680698862203905108",
"30206969724119143494141558096926651297",
"217041798296148770804470453324069163047",
"289773539901831041864322127177223911478",
"47609959695300125555359722268805212249",
"222649024755598456809448193426914284675",
"338964087336250609161902249707830215848",
"93473392554369397833630464863448562840",
"100948127884780555046071597471515249100",
"198578653356781033885523241270761227272",
"287123487886482564784395066883872398446",
"249205317071617064703936053884855758417",
"98530973597863056403969103259345921715",
"144800284959161927663057149655147183201",
"324993567668287324268482018491203414537",
"210115317981845178065587631705923666300",
"41762135645271798089029657691633757663",
"246010311257001523677690539119324559636",
"149680349826640528483354740481254459251",
"295958898636203222170370142042736583295",
"112959108159432535240963066919104011782",
"136835372863226888815960548179064599628",
"132968182824584386265149634579489616877",
"223331655419663464424058138021793719075",
"230013571174223386357946587566661952273",
"47886915471525204117347440069175249354",
"157810709699638366236228578991097412232",
"128475391053680046908207143486095171959",
"191590770875640093210518583243713252050",
"87765331679472814264490347862391778069",
"88214371464932225431668766052906442240",
"310896095783956339832253451084204737896",
"319042862204368343363416999772693323787"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-5c3f2b17",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/test/java/org/sonatype/nexus/proxy/storage/remote/httpclient/HttpClientRemoteStorageTest.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"236531211909953826035585792587243477514",
"18072328923966546229035553277661375259",
"256556702301359487253913145703288083935",
"276969776425164833351334127357063407339"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-5d068053",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/gav/M2GavCalculator.java",
"function": "pathToGav"
},
"signature_type": "Function",
"digest": {
"length": 1418.0,
"function_hash": "21037904392877119757578443232407071428"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-64ae333d",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/AbstractMavenRepository.java",
"function": "expireRemoteHash"
},
"signature_type": "Function",
"digest": {
"length": 650.0,
"function_hash": "4598907051185119526827653902677892989"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-6749ca25",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/item/ChecksumReconciler.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"61351833221685255427309885003946551045",
"321989845293492045117558395775956893367",
"26204943915258536296413079617783197233",
"205650862735654989415836053427754571552",
"115491053454603826089374399356737833559",
"83775708877378476482621404722931139744",
"74587707846914926109084185211177306364",
"230554647232121130958283414622606605322",
"227416306940080779155542453813592052328",
"143784619787658207207572038126849611731",
"117156087481578061118753625483360314680",
"185611965792592331140800936788371319011",
"105931892845479340259781317097045325023",
"172447148861571776755917191258330951226",
"41839365622580664855743772349607382956",
"255759196175932503474678183601836566125",
"34436872984214375615129649131825941708",
"149625256280166855618819653661006068295",
"140877223473868403070425366649738420633",
"82699955003909814612500424648129820459",
"51813425734456194876418503093948752872",
"323674750790744603479429373057464871078",
"63326847780149482454556631858936907975",
"235051824400440898663543686078966773179",
"16438241701378392695849460312692073246",
"190059205769378980395676116097007065485",
"233674999012340684812701231348498188325",
"126644157397099979868420484151157169818",
"37191838501922155671263638433869518689",
"197364285193273606257924359119538184552",
"147427581003152294773817830328065840637",
"199336458651303758922177250865645636923"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-69d3e824",
"signature_version": "v1"
},
{
"target": {
"file": "testsuite/legacy-testsuite/src/test/java/org/sonatype/nexus/testsuite/ldap/nxcm147/Nxcm147SavedPasswordConnectionJsonIT.java",
"function": "init"
},
"signature_type": "Function",
"digest": {
"length": 111.0,
"function_hash": "284332799805972758704557679658441423358"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-6afc883c",
"signature_version": "v1"
},
{
"target": {
"file": "plugins/basic/nexus-webresources-plugin/src/main/java/org/sonatype/nexus/webresources/internal/WebResourceServiceImpl.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"317434635592425619092749413560515552991",
"69972679956129330505502253883661476944",
"147597623922711815961508530157502071710",
"80639375334472642259760116926786333366",
"250691930426526372693436276340461849502",
"133285997528047672967987959732986392327",
"147015487538782627096314478141113081599",
"317790893909056780104160593356403786250",
"54484807932775396982806822580967957887",
"30651528467597897582037398410374083719",
"265957466780214239752694870781777178725",
"172439405611398557457397903027301826925",
"145937472374362344822754399618522064949",
"12890961580078443035847369205221454933",
"263391163391691003223453257460143319035",
"324160770749570441427204113943587313652",
"299525049116512443123614584865198361710",
"184937887625033912545329680113919267141",
"329841598437598865971584343530218158897",
"111985310899680028321976152282057781412",
"34358181176939317155008898778128897597",
"35369056117837198075214668751790014883",
"180320113949330583715076176312452331470",
"21334913724961883159678878151750909991"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-6b453481",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/storage/local/AbstractLocalRepositoryStorage.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"292809656828839106996948824207434299422",
"90685968782667713470535390505885569891",
"91948851720111834521342288060064027026",
"293654644689906226973265773594376664953",
"67326856156100157260213574037978974191"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-6c3862ba",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/AbstractMavenRepository.java",
"function": "doListItems"
},
"signature_type": "Function",
"digest": {
"length": 554.0,
"function_hash": "75208196530762018995155066954139874060"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-7066eec1",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/AbstractMavenRepository.java",
"function": "doRetrieveItem"
},
"signature_type": "Function",
"digest": {
"length": 855.0,
"function_hash": "266623080897536243957427640363090676550"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-74894495",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/repository/ExpireCacheWalker.java",
"function": "processFileItem"
},
"signature_type": "Function",
"digest": {
"length": 399.0,
"function_hash": "248993093782656698032405290664165518602"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-763b3ab9",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/test/java/org/sonatype/nexus/proxy/maven/metadata/RecreateMavenMetadataWalkerIT.java",
"function": "testRebuildMavenMetadataIsSmarter"
},
"signature_type": "Function",
"digest": {
"length": 1502.0,
"function_hash": "282487950043414812479683804799909999819"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-77c72b80",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/test/java/org/sonatype/nexus/proxy/maven/routing/internal/PrefixFileMaintenanceTest.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"108675323797007672727584691432860562141",
"157312188354511983101662387100523655668",
"259064473162242943146616792775458007682",
"230143896281713998287682947931934623505",
"296607172503953264894603673795011544830",
"285566451481750391854787760492780221922",
"5404590634381254422429080905050415150",
"53157141056172520496398973624277568667",
"198920621941034066595226442359421364310",
"159925655839845817460022346016177890328",
"170879360065772514744883855176287727688",
"182519537589804480974324549004304479496",
"229048648952710909830464452484208488489",
"65777417757572151662336932127955069525",
"162576564686176780048563472422625824853",
"116438035451317893719955246785509338065",
"267998587097895209944121686926981559739",
"266736393216566573695760671102889869567",
"170879360065772514744883855176287727688",
"182519537589804480974324549004304479496",
"229048648952710909830464452484208488489",
"65777417757572151662336932127955069525",
"162576564686176780048563472422625824853",
"27008483833921507148990219808626768911",
"160910829257633599858586960751097426162",
"111376702289381891874597651738612206149",
"157312188354511983101662387100523655668",
"259064473162242943146616792775458007682",
"230143896281713998287682947931934623505",
"289153424820106808059887713754784117145",
"196442759897203684308853301542380029658",
"63537408977980243634346969509290353819",
"2659179180906924929466188589497856091",
"147445907589748690073639241486079650191",
"117289741539693632636280953885944776409",
"109129708281750852571357041747133423137",
"265170018526739149992633593849268035803",
"286142950576406459727285838765764427857",
"129959103541515752330963602025829271457",
"108044360171260644485387973629606235911",
"115475566799830774787058316662053713388"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-798b8067",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/attributes/inspectors/DigestCalculatingInspector.java",
"function": "processStorageItem"
},
"signature_type": "Function",
"digest": {
"length": 538.0,
"function_hash": "247582916578462449422327256622079156382"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-7e0cc1bc",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/maven2/M2GroupRepository.java",
"function": "doRetrieveMetadata"
},
"signature_type": "Function",
"digest": {
"length": 2820.0,
"function_hash": "107138405989713427110103625781358342629"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-7e3badf0",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/gav/M2ArtifactRecognizer.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"245964056492360711039270380620012119526",
"23914804904494017148729200299746644906",
"26965558018217060902977209617908990369",
"275111352447090362131419612478708249484",
"311508805247876004300359907414712504175",
"227850602291657932579884619685002555666",
"332279720737452381443193747595428101946",
"67206965264012490237741187105028098847",
"94579838176531057503375200287593222109"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-7fca8641",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/metadata/DefaultMetadataHelper.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"240359738400849447546566100606448628291",
"275303409396916704651989042272017123914",
"2534043049817534286486183165390587145"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-7fee1a15",
"signature_version": "v1"
},
{
"target": {
"file": "plugins/indexer/nexus-indexer-lucene-plugin/src/main/java/org/sonatype/nexus/index/NexusScanningListener.java",
"function": "artifactDiscovered"
},
"signature_type": "Function",
"digest": {
"length": 532.0,
"function_hash": "68062158392748699757066762255897662064"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-893f76eb",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/LayoutConverterShadowRepository.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"255611600302113773778922728822127888407",
"330596483500464419195794786942816567582",
"39515036656635877200313855274404202958",
"292176789652870357798933800146712953298",
"12639127836553727994050816309347444244",
"323477644644739327442021210528572097668",
"64080418696525081989601553355603298060",
"166668641781602498352803306362971380497",
"333955015325189395764253415726765818444",
"307093475989516506973790163957401032766",
"7439852233880009710928311267452096772",
"112210200090733819291545716171925909999"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-8eb3a97c",
"signature_version": "v1"
},
{
"target": {
"file": "plugins/security/nexus-ldap-realm-plugin/src/main/java/org/sonatype/nexus/security/ldap/realms/api/AbstractLdapRealmPlexusResource.java",
"function": "restToLdapModel"
},
"signature_type": "Function",
"digest": {
"length": 606.0,
"function_hash": "213192425349250113544587698998596760416"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-91304da3",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/test/java/org/sonatype/nexus/proxy/storage/remote/httpclient/HttpClientManagerTest.java",
"function": "useCookiesForHosts"
},
"signature_type": "Function",
"digest": {
"length": 1760.0,
"function_hash": "280974540491874418763583610621608211711"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-920690ce",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/gav/Gav.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"263008349508375224162011144499012560016",
"301813773036967903693371504515577037790",
"38547362840639035571466663811389070579",
"90007857307651895065775547564097693337"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-9b7922a2",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/test/java/org/sonatype/nexus/AbstractMavenRepoContentTests.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"108539710826121352659696331655139536325",
"86816943886073349311338212461300417680",
"290002051156040277397784510117053780689",
"240149073512657664781504987404184667719"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-a12a59b6",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/test/java/org/sonatype/nexus/proxy/RepoConversionTest.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"313652728092155124131652578897596951363",
"75552395171418087663321023820132818466",
"80308844729590517458752855001488350267",
"241298378827831399649577271181318244136"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-a3184a2d",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/maven2/M2Repository.java",
"function": "doRetrieveItem"
},
"signature_type": "Function",
"digest": {
"length": 2454.0,
"function_hash": "198583239625575802226328120267717584706"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-a79f8fe3",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/ArtifactStoreHelper.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"330027596785580232179607495987560586234",
"236650000594654856921774657620665797986",
"171173733998609763941867808229790185444",
"129745736836239532158463051021606421709",
"50607270025727699257943256756555103863",
"199429638806007158766216008979046039113",
"282148840042880094301373984736586157352",
"39515036656635877200313855274404202958",
"18073838456680646021303582967561994850",
"146588267321982724099808949577954892121",
"77915100324871815369858181336779132813",
"105552502910526552317808263375720525917",
"104685592503260264690038466604951612747",
"15778450921201501078524227530277679037",
"12639127836553727994050816309347444244",
"1172701452042997473000967596616162246",
"228878153113641432736943386053300856225",
"73957601755118208492248242477930519786",
"138076065799216114080643565016604690788",
"118577982476179761658043272374736447041",
"304858399555833416692125591796222247624",
"333033747680973226431474719411207671694",
"121466462285441111123779518352403566669",
"307255890858974472669987612749744605154",
"130828629295823731184050140426940965011",
"258572328505878060634183503555919328614",
"203390422331135164456998239784737166501",
"168575058779568150635397803825533431696",
"166668641781602498352803306362971380497",
"333955015325189395764253415726765818444",
"211819845779368161878269392061720848328",
"301182207980130769308203140429921478729",
"288421860021939946093563465657055785680",
"5235999675676244755092409406773899897",
"100944156522804853008978841693858854591",
"143591312545945087883350835196658432888",
"7439852233880009710928311267452096772",
"61657680755830218945550692303567638909",
"270829980750267840417182500458029228650",
"149571674848996138491669603403339910451",
"337227329810528390227158700724853725225",
"84087250072561196140458797685332429210",
"221352369892993902720905399761406446879",
"333033747680973226431474719411207671694",
"121466462285441111123779518352403566669",
"221863232551324732336434266347390691953",
"201245875889394625032854763449993229815",
"325229760262001823353297946410353604001",
"17210562011495993472941320718407077649",
"309763002654439885615315867766683219412",
"4600613198899571483001216922822967747",
"77502847484047751086214891503747060612",
"21843825132763449435489486758967186470"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-ab6147b2",
"signature_version": "v1"
},
{
"target": {
"file": "plugins/security/nexus-ldap-realm-plugin/src/main/java/org/sonatype/nexus/security/ldap/realms/test/api/LdapUserAndGroupConfigTestPlexusResource.java",
"function": "getConnectionInfo"
},
"signature_type": "Function",
"digest": {
"length": 606.0,
"function_hash": "213192425349250113544587698998596760416"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-aea258e9",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/storage/local/AbstractLocalRepositoryStorage.java",
"function": "prepareStorageFileItemForStore"
},
"signature_type": "Function",
"digest": {
"length": 609.0,
"function_hash": "296879801988631505329830591819394223429"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-af446d10",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/ArtifactStoreHelper.java",
"function": "storeItemWithChecksums"
},
"signature_type": "Function",
"digest": {
"length": 1280.0,
"function_hash": "89536978137712165026069903053138794017"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-b5bc223b",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/gav/M2ArtifactRecognizer.java",
"function": "isChecksum"
},
"signature_type": "Function",
"digest": {
"length": 103.0,
"function_hash": "303080622594029168253445016926768212966"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-b9800d7d",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/test/java/org/sonatype/nexus/proxy/RepoConversionTest.java",
"function": "convertHosted2Proxy"
},
"signature_type": "Function",
"digest": {
"length": 1401.0,
"function_hash": "44680511609474172365069035319356101385"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-b9c32f02",
"signature_version": "v1"
},
{
"target": {
"file": "plugins/security/nexus-ldap-realm-plugin/src/test/java/org/sonatype/nexus/security/ldap/realms/api/LdapConnNotConfiguredIT.java",
"function": "testSetPasswordToFake"
},
"signature_type": "Function",
"digest": {
"length": 771.0,
"function_hash": "108500223281409146019305035057406391499"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-bb89f188",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/attributes/inspectors/DigestCalculatingInspector.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"163212254711802961070530948097851928010",
"305646790508256715140639710974346455271",
"66669802531649630560301918838987852958",
"275208106455913961433031144989198799093",
"244364721930211489612134259814422075601",
"46344158331835727712661652665592127340",
"91948851720111834521342288060064027026",
"107513598252481440121630161373417508362",
"305567931013586319542072222916450030356",
"26370910894308075140609707039217750024",
"161346933532441095368937286313166273989",
"155916695144744019141286730345362708631"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-bba5f791",
"signature_version": "v1"
},
{
"target": {
"file": "testsuite/legacy-testsuite/src/test/java/org/sonatype/nexus/testsuite/p2/AbstractNexusP2IT.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"287368276655180284869038877316923808104",
"97371735463767145816171830137553963059",
"74232037770447291550425508797409727055",
"8680744761148665961318336946404209515",
"188164282471286827070073082252442163110",
"218092425759497368720486118953813493468",
"336158656351160641407862554926511106874",
"196015033379296924224024635756873859215"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-be0146cb",
"signature_version": "v1"
},
{
"target": {
"file": "plugins/security/nexus-ldap-realm-plugin/src/main/java/org/sonatype/nexus/security/ldap/realms/api/AbstractLdapRealmPlexusResource.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"105732598505126494730968126994249973236",
"5486727952625091785569061560646227169",
"26802220004424442769552865934949746844",
"89706019866321764821478914035592323550",
"302507516099481240891020680188249938979",
"2426180230470377667687938366976049923",
"254448962362602149670332302846941792623",
"148379250760639972240292922577561488661",
"325188647305976736770208098843764948054",
"292441688030371188746756674262591191351",
"134288337058826603750685886338816599626",
"255833137315742082294271631174665333027",
"19316709357196148287756445787288849473",
"297534156402927260252078887693327878714",
"273870472383021806250175286091104506890",
"152833066918038186165688582943319526249",
"104184821476952716407659788619231091551"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-c4912123",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/util/DigesterUtils.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"145526353044462187490997367451641450047",
"194207114789379821365225731904742303239",
"151836464972323216305531261411723355428",
"31462839900266279062353189055189057776"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-c53203c2",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/test/java/org/sonatype/nexus/proxy/storage/remote/httpclient/HttpClientRemoteStorageTest.java",
"function": "checkRepositoryRemoteAvailabilityNeglectLastModified"
},
"signature_type": "Function",
"digest": {
"length": 1403.0,
"function_hash": "141482858816590367538143224742830331263"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-c7293d2d",
"signature_version": "v1"
},
{
"target": {
"file": "testsuite/legacy-testsuite/src/test/java/org/sonatype/nexus/testsuite/p2/AbstractNexusP2IT.java",
"function": "installUsingP2"
},
"signature_type": "Function",
"digest": {
"length": 1394.0,
"function_hash": "89353698924315526500952098661319940664"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-d390403a",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/test/java/org/sonatype/nexus/proxy/maven/routing/internal/scrape/NexusScraperTest.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"184802936127081329308963733765782224856",
"81192444720934503718542493967186493170",
"186178878927137068259956188214583784232",
"28636624238064231287944201102577507844"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-d4b6c5db",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/test/java/org/sonatype/nexus/proxy/maven/routing/internal/LocalContentDiscovererImplTest.java",
"function": "smoke"
},
"signature_type": "Function",
"digest": {
"length": 1989.0,
"function_hash": "108729461758954542317303554647844000305"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-d555416b",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/ArtifactStoreHelper.java",
"function": "storeItemWithChecksums"
},
"signature_type": "Function",
"digest": {
"length": 1111.0,
"function_hash": "126853319637622976378514368888069866768"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-d85e38cc",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/gav/M2ArtifactRecognizer.java",
"function": "isMetadata"
},
"signature_type": "Function",
"digest": {
"length": 184.0,
"function_hash": "80570366683106995681636906936280526324"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-d93a7758",
"signature_version": "v1"
},
{
"target": {
"file": "plugins/security/nexus-ldap-realm-plugin/src/main/java/org/sonatype/nexus/security/ldap/realms/api/AbstractLdapRealmPlexusResource.java",
"function": "ldapToRestModel"
},
"signature_type": "Function",
"digest": {
"length": 488.0,
"function_hash": "255614087802833881110851642288705602787"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-da2e13a3",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/metadata/AbstractMetadataHelper.java",
"function": "rebuildChecksum"
},
"signature_type": "Function",
"digest": {
"length": 402.0,
"function_hash": "156077116262262992297744168561920668066"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-db8ce1dc",
"signature_version": "v1"
},
{
"target": {
"file": "plugins/security/nexus-ldap-realm-plugin/src/test/java/org/sonatype/nexus/NexusLdapTestSupport.java",
"function": "validateConnectionDTO"
},
"signature_type": "Function",
"digest": {
"length": 710.0,
"function_hash": "192814437816093665836468680972031378884"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-dc86d593",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/test/java/org/sonatype/nexus/proxy/maven/metadata/RecreateMavenMetadataWalkerIT.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"27306357464373213863842168513855089668",
"3878976505643664965731526745347395114",
"72708886424326413320450175028325335547",
"296920570952903402206980343305644718560",
"95327518881434209784009371601012412085",
"257233298876656722863057282157749007778",
"8000058734826461596164124804839362776",
"113446953756900171982239232935162535039",
"32060759788192883555865118155457918359"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-dc88486d",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/item/ChecksumReconciler.java",
"function": "reconcileItemChecksum"
},
"signature_type": "Function",
"digest": {
"length": 1546.0,
"function_hash": "75429989739516921300947177222466042261"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-dddb510d",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/ArtifactStoreHelper.java",
"function": "deleteItemWithChecksums"
},
"signature_type": "Function",
"digest": {
"length": 864.0,
"function_hash": "226854900619408322750878083375473761464"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-e03693b0",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/test/java/org/sonatype/nexus/AbstractMavenRepoContentTests.java",
"function": "directoryWalkStep"
},
"signature_type": "Function",
"digest": {
"length": 330.0,
"function_hash": "20860840110944025967962686365977150752"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-e0845dfc",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/AbstractMavenRepository.java",
"function": "doExpireProxyCaches"
},
"signature_type": "Function",
"digest": {
"length": 414.0,
"function_hash": "114413816363063437889665174325975299799"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-e4475d9d",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/test/java/org/sonatype/nexus/proxy/storage/remote/httpclient/HttpClientManagerTest.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"76937787166610975614785287325581180696",
"47592977512203792220475622536246452690",
"261963528943652143194338839149025374878",
"81116282339286153062507326765973168649",
"76937787166610975614785287325581180696",
"47592977512203792220475622536246452690",
"261963528943652143194338839149025374878",
"8667927618148278804615146587360225262"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-e91c06a3",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/AbstractMavenRepository.java",
"function": "doCacheItem"
},
"signature_type": "Function",
"digest": {
"length": 228.0,
"function_hash": "276021365206078913555025029123583642151"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-f0f574be",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/test/java/org/sonatype/nexus/proxy/repository/AnAbstractProxyRepositoryRetrieveRemoteItemMethodTest.java",
"function": "prepare"
},
"signature_type": "Function",
"digest": {
"length": 1804.0,
"function_hash": "41263886927830044494100717784378712334"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-f30795b6",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/test/java/org/sonatype/nexus/proxy/repository/AnAbstractProxyRepositoryRetrieveRemoteItemMethodTest.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"16500945813323814449835362205242917511",
"207582526188893082475654255150281755653",
"99423431276113497360266227782001943586",
"43901037432536308310903024669118364962"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-f3ca99f9",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/gav/M2GavCalculator.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"123512770349676466774902172648514419413",
"52724895648388157611204091469394947470",
"54099741594347837173710401120150857625",
"103261780380469854636004999423122879146"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-f4da06f2",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/repository/ExpireCacheWalker.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"265164148932167145802190261599720054742",
"259501044808570771918592909634330561592",
"190953241120139972815604517008100417688",
"148820110041393429134299991625253753060",
"259948998411371929695621535447028367224",
"313653219444929105358757431821781930413",
"337761001251226313507464724408415136348",
"43416035102223860542376177995605543123"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-f59f38ea",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/item/ChecksumReconciler.java",
"function": "ChecksumReconciler"
},
"signature_type": "Function",
"digest": {
"length": 220.0,
"function_hash": "174758009256294492061919759561806744945"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-f8bac255",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/test/java/org/sonatype/nexus/proxy/maven/routing/internal/LocalContentDiscovererImplTest.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"333680766669777502473133705581120029673",
"69502600114448889779056963594539415524",
"209159770912203561314356101628063589623",
"108524720081053723808501540465542705639",
"109586740807468504311114092761126037860",
"153844628515409802069223222849582550616",
"212281620393823021602915685463879389596",
"333680766669777502473133705581120029673",
"317359906500799767403850818726629419905",
"226039083171315582161858100484306093590",
"252039508976027107708641513161272971714",
"14377715236552690562392730117483039048",
"75898532504398956939785453769008247371",
"333680766669777502473133705581120029673",
"252078020531949078695475655104151927775",
"316969336431485951483298086245721493771",
"8365309238987075804864023238719094110",
"263694775467188269683385814617985980404",
"46145148944126492987956030637838837880"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-fae79190",
"signature_version": "v1"
},
{
"target": {
"file": "plugins/basic/nexus-webresources-plugin/src/main/java/org/sonatype/nexus/webresources/internal/WebResourceServiceImpl.java",
"function": "getResource"
},
"signature_type": "Function",
"digest": {
"length": 838.0,
"function_hash": "164654088292372414960404533136432847612"
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-fc2e9b47",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/ChecksumContentValidator.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"91002369872562464869308146195837982832",
"86157596907390129348638226443495318373",
"211757972371827173315310195612230809951",
"265905437433748042022111172076341122078",
"133907202877892273410848535759790701986",
"24732293010834477589112513698489559877",
"178148987290487792446781241069547681477",
"309328443805331344526696865128644940745",
"76453349036937725554821591325860872435",
"54920113965427676797736989113446169918",
"305697167457299451324453829206957847443",
"156556296589826330134508570263521841069",
"48233961081627896862029747020939330802",
"82255658603896346272568055445362485475"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-ff35797c",
"signature_version": "v1"
},
{
"target": {
"file": "plugins/indexer/nexus-indexer-lucene-plugin/src/main/java/org/sonatype/nexus/index/NexusScanningListener.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"58375786179617974862297193916647151298",
"156806593080177095823938249424578507455",
"130550286053241693289858705672930401322",
"228174679147861886932445079457659116332"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-ff6defcb",
"signature_version": "v1"
},
{
"target": {
"file": "components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/maven2/M2Repository.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"116653710931182550266408071362548374826",
"108052378837705274555624025179448839058",
"143797585705193610605059057903433779336",
"206786173855272652277726170998015960614",
"46112429443977247620762668419428287169",
"240058002024000627774030774637669347244",
"229896130221953159601586820123916586658",
"324907236470658706720859211434200497750"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565",
"id": "CVE-2020-15012-fffa8e55",
"signature_version": "v1"
}
]
source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-15012.json"