CVE-2024-4956 PoC — Nexus Repository 3 - Path Traversal

Source

https://github.com/Buff3st-0v3rfl0w/CVE-2024-4956

Associated Vulnerability

Title:Nexus Repository 3 - Path Traversal (CVE-2024-4956)
Description:Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1.

Description

Quick and easy exploitation of CVE-2024-4956 for LFI.

Readme

# CVE-2024-4956
Quick and easy exploitation of CVE-2024-4956 for LFI based on original PoC from: VeryLazyTech, https://github.com/verylazytech/CVE-2024-4956.

This implementation takes 2 arguments, url and file, and presents the output of the file if it is found.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!