Page History

Versions Compared

Key

This line was added.
This line was removed.
Formatting was changed.

...

Code Block

	xml
	xml
title	Staging Repository

<repositories>
  <repository>
    <id>apache.nexus</id>
    <name>ASF Nexus Staging</name>
    <url>https://repository.apache.org/content/groups/staging/</url>
  </repository>
</repositories>

Internal Changes

Forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution, read more details in S2-029
Possible RCE vulnerability in XSLTResult was fixed, read more details in S2-031
Prevents execution of chained expressions based on new isSequence flag introduce in appropriated OGNL versions, it's related to S2-032

...