# sonatype-2024-013290

Malicious Packages, Specific Versions - Thu Dec 19 2024 [RCE]

Published Dec 19, 2024

CVSS Score: High

**8.7**

## Security Details

### Components Impacted

**Sonatype Research**

### sonatype-2024-013290 Security Details

**CVE ID:** sonatype-2024-013290  
**CWE:** N/A  
**CVE Description:** Malicious Packages, Specific Versions - Thu Dec 19 2024 [RCE]  
**Published:** Dec 19, 2024  
**CVSS Score & Severity:** 8.7 High  
**CVSS Vector:** CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N  
**EPSS Score:** 0%

### Malware

**KEV Status:** Not in KEV Catalog: No known exploits

### Affected Ecosystems

**Source:** Sonatype

### References

[help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html "https://help.sonatype.com/en/sonatype-malware-data.html") THIRD_PARTY