CVE-2024-4956 PoC — Sonatype Nexus Repository 安全漏洞

来源

关联漏洞

Description

Nexus Repository 3 Path Traversal (CVE-2024-4956)

介绍

# Day 4 – Nexus Repository 3 Path Traversal (CVE-2024-4956)

**What:** Unauthenticated path traversal lets anyone download arbitrary files with a crafted URL.  
**Vuln:** Affects Nexus Repo 3 versions **≤ 3.68.0**. Fixed in **3.68.1**.  
**Source:** Sonatype advisory + NVD.  
**Safety:** Lab is local-only. Don’t target systems you don’t own.

## Setup

```bash
docker build -t day4-nexus-4956 .
docker run -d -p 8081:8081 --name day4 day4-nexus-4956
# Boot takes ~1–2 minutes; watch: docker logs -f day4
curl -I httphttp://localhost:8081/
```

! If you stuck you can use ./exploit.sh (after the container is running)

文件快照

 [4.0K]  /data/pocs/b6d8d765d5965ee99fe239131c461fb66ffa4c11
├── [ 255]  DISCLAIMER.md
├── [ 490]  Dockerfile
├── [ 620]  entrypoint.sh
├── [ 527]  exploit.sh
└── [ 629]  README.md

0 directories, 5 files

备注