Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2024-4956— Nexus Repository 3 - Path Traversal

Quick assessment

Affected
Sonatype Nexus Repository
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Sonatype Nexus Repository是美国Sonatype公司的一款存储库管理器，它主要用于管理、存储和分发软件等。 Sonatype Nexus Repository 3.68.1之前版本存在安全漏洞，该漏洞源于存在路径遍历，允许未经身份验证的攻击者读取系统文件。

CVSS 7.5 · High EPSS 18.25% · P97

Public Exploits 2

ExploitDB · 1 EDB-52101 [webapps]
Nuclei · 1 CVE-2024-4956.yaml [template]
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-4956

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Nexus Repository 3 - Path Traversal
Source: CVE Program / CVE List V5
Vulnerability Description
Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Vulnerability Title
Sonatype Nexus Repository 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Sonatype Nexus Repository是美国Sonatype公司的一款存储库管理器，它主要用于管理、存储和分发软件等。 Sonatype Nexus Repository 3.68.1之前版本存在安全漏洞，该漏洞源于存在路径遍历，允许未经身份验证的攻击者读取系统文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Sonatype Nexus Repository 3.0.0 ~ 3.68.0 cpe:2.3:a:sonatype:nexus_repository_manager:3.0.0:*:*:*:*:*:*:*

II. Public POCs for CVE-2024-4956

# POC Description Source Link Shenlong Link
1 Nexus Repository Manager 3 Unauthenticated Path Traversal https://github.com/banditzCyber0x/CVE-2024-4956 POC Details
2 CVE-2024-4956 Nuclei Template https://github.com/xungzzz/CVE-2024-4956 POC Details
3 Unauthenticated Path Traversal in Nexus Repository 3 https://github.com/gmh5225/CVE-2024-4956 POC Details
4 [CVE-2024-4956] Nexus Repository Manager 3 Unauthenticated Path Traversal Bulk Scanner https://github.com/ifconfig-me/CVE-2024-4956-Bulk-Scanner POC Details
5 None https://github.com/thinhap/CVE-2024-4956-PoC POC Details
6 None https://github.com/eoslvs/CVE-2024-4956 POC Details
7 CVE-2024-4956 : Nexus Repository Manager 3 poc exploit https://github.com/GoatSecurity/CVE-2024-4956 POC Details
8 Proof-Of-Concept (POC) for CVE-2024-4956 https://github.com/TypicalModMaker/CVE-2024-4956 POC Details
9 Exploit for CVE-2024-4956 affecting all previous Sonatype Nexus Repository 3.x OSS/Pro versions up to and including 3.68.0 https://github.com/Praison001/CVE-2024-4956-Sonatype-Nexus-Repository-Manager POC Details
10 Sonatype Nexus Repository Manager 3 (LFI) https://github.com/Cappricio-Securities/CVE-2024-4956 POC Details
11 CVE-2024-4956 Python exploitation utility https://github.com/fin3ss3g0d/CVE-2024-4956 POC Details
12 Unauthenticated Path Traversal in Nexus Repository 3 https://github.com/erickfernandox/CVE-2024-4956 POC Details
13 POC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path Traversal https://github.com/verylazytech/CVE-2024-4956 POC Details
14 None https://github.com/yagyuufellinluvv/CVE-2024-4956 POC Details
15 None https://github.com/JolyIrsb/CVE-2024-4956 POC Details
16 None https://github.com/UMASANKAR-MG/Path-Traversal-CVE-2024-4956 POC Details
17 Simple hash cracker for Apache Shiro hashes written in Golang. Useful for exploiting CVE-2024-4956. https://github.com/An00bRektn/shirocrack POC Details
18 CVE-2024-4956 Python exploitation utility https://github.com/XiaomingX/cve-2024-4956 POC Details
19 Detection and exploitation scripts for CVE-2024-4956 https://github.com/art-of-defence/CVE-2024-4956 POC Details
20 Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4956.yaml POC Details
21 None https://github.com/Threekiii/Awesome-POC/blob/master/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/Nexus%20Repository%20Manager%203%20%E6%9C%AA%E6%8E%88%E6%9D%83%E7%9B%AE%E5%BD%95%E7%A9%BF%E8%B6%8A%E6%BC%8F%E6%B4%9E%20CVE-2024-4956.md POC Details
22 https://github.com/vulhub/vulhub/blob/master/nexus/CVE-2024-4956/README.md POC Details
23 Quick and easy exploitation of CVE-2024-4956 for LFI. https://github.com/Buff3st-0v3rfl0w/CVE-2024-4956 POC Details
24 Nexus Repository 3 Path Traversal (CVE-2024-4956) https://github.com/amalpvatayam67/day04-nexus-4956 POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-4956

请登录查看更多情报信息。

Other References for CVE-2024-4956 (1)

IV. Related Vulnerabilities

Same product: Nexus Repository
Same vendor: Sonatype
Same weakness: CWE-22

V. Comments for CVE-2024-4956

No comments yet

Leave a comment