CVEs-PoC/2024/CVE-2024-4956.md

CVE-2024-4956

Description

Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1.

POC

Reference

No PoCs from references.

Github

• https://github.com/Cappricio-Securities/CVE-2024-4956
• https://github.com/GoatSecurity/CVE-2024-4956
• https://github.com/Ostorlab/KEV
• https://github.com/Praison001/CVE-2024-4956-Sonatype-Nexus-Repository-Manager
• https://github.com/Threekiii/Awesome-POC
• https://github.com/Threekiii/CVE
• https://github.com/TypicalModMaker/CVE-2024-4956
• https://github.com/X1r0z/JettyFuzz
• https://github.com/banditzCyber0x/CVE-2024-4956
• https://github.com/codeb0ss/CVE-2024-4956-PoC
• https://github.com/enomothem/PenTestNote
• https://github.com/erickfernandox/CVE-2024-4956
• https://github.com/fin3ss3g0d/CVE-2024-4956
• https://github.com/fin3ss3g0d/Shiro1Extractor
• https://github.com/fin3ss3g0d/Shiro1Tools
• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/gmh5225/CVE-2024-4956
• https://github.com/ifconfig-me/CVE-2024-4956-Bulk-Scanner
• https://github.com/ifconfig-me/Path-Traversal-Scanner
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/securitycipher/daily-bugbounty-writeups
• https://github.com/tanjiti/sec_profile
• https://github.com/thinhap/CVE-2024-4956-PoC
• https://github.com/verylazytech/CVE-2024-4956
• https://github.com/wjlin0/poc-doc
• https://github.com/wy876/POC
• https://github.com/wy876/wiki
• https://github.com/xungzzz/CVE-2024-4956