Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).
Advisories for Maven/Org.sonatype.nexus/Nexus-Extdirect package
2020