1. Home
  2. Vulnerabilities
  3. CVE-2024-4956
7.5
HIGH CVSS 3.1
CVE-2024-4956
Sonatype Nexus Repository File Path Traversal Vulnerability
Description

Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1.

INFO

Published Date :

May 16, 2024, 4:15 p.m.

Last Modified :

Nov. 21, 2024, 9:43 a.m.

Remotely Exploit :

Yes !

Source :

103e4ec9-0a87-450b-af77-479448ddef11
Affected Products

The following products are affected by CVE-2024-4956 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Sonatype nexus_repository_manager
: Total Affected Vendor : 1 | Products : 1
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and displays CVSS scores from various sources for each CVE.
Score Version Severity Vector Exploitability Score Impact Score Source
CVSS 3.1 HIGH 103e4ec9-0a87-450b-af77-479448ddef11
Public PoC/Exploit Available at Github

CVE-2024-4956 has a 58 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2024-4956.

URL Resource
https://support.sonatype.com/hc/en-us/articles/29416509323923
https://support.sonatype.com/hc/en-us/articles/29416509323923
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2024-4956 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2024-4956 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Profile Photo
zhanpengliu-tencent/medium-cve

None

Updated: 1 week, 2 days ago
0 stars 0 fork 0 watcher
Born at : Aug. 15, 2025, 9:07 a.m. This repo has been linked 310 different CVEs too.
Profile Photo
0day404/HV-2024-POC

护网2024-POC收录备份

Updated: 2 weeks, 3 days ago
0 stars 0 fork 0 watcher
Born at : Aug. 4, 2025, 1:25 p.m. This repo has been linked 119 different CVEs too.
Profile Photo
Lern0n/Lernon-POC

备份的漏洞库，3月开始我们来维护

Updated: 1 month, 1 week ago
2 stars 0 fork 0 watcher
Born at : June 30, 2025, 9:14 a.m. This repo has been linked 216 different CVEs too.
Profile Photo
oLy0/Vulnerability

None

Updated: 2 months, 1 week ago
0 stars 0 fork 0 watcher
Born at : June 15, 2025, 2:32 a.m. This repo has been linked 216 different CVEs too.
Profile Photo
oLy0/Vulnerability

None

Updated: 2 months, 3 weeks ago
0 stars 0 fork 0 watcher
Born at : May 30, 2025, 2:59 a.m. This repo has been linked 213 different CVEs too.
Profile Photo
cyberwithcyril/VulhubPenTestingReport

Educational penetration testing using Vulhub. Recreated and documented exploits for 11 high-impact vulnerabilities across popular web applications.

cve cybersecurity docker ethical-hacking exploits infosec penetration-testing vulhub

Updated: 1 month ago
1 stars 1 fork 1 watcher
Born at : May 7, 2025, 7:04 p.m. This repo has been linked 10 different CVEs too.
Profile Photo
12442RF/POC

None

HTML

Updated: 3 months, 2 weeks ago
0 stars 0 fork 0 watcher
Born at : May 6, 2025, 2:20 a.m. This repo has been linked 201 different CVEs too.
Profile Photo
laoa1573/wy876

wy876

Python

Updated: 1 month, 2 weeks ago
8 stars 2 fork 2 watcher
Born at : April 11, 2025, 4:25 a.m. This repo has been linked 209 different CVEs too.
Profile Photo
art-of-defence/CVE-2024-4956

Detection and exploitation scripts for CVE-2024-4956

Python

Updated: 4 months, 4 weeks ago
0 stars 0 fork 0 watcher
Born at : March 26, 2025, 1:27 p.m. This repo has been linked 1 different CVEs too.
Profile Photo
adysec/POC

wy876 POC | wy876的poc仓库已删库，该项目为其仓库镜像

Updated: 1 month ago
349 stars 196 fork 196 watcher
Born at : March 7, 2025, 10:17 a.m. This repo has been linked 201 different CVEs too.
Profile Photo
cisp-pte/POC-20241008-sec-fork

收集整理漏洞EXP/POC,大部分漏洞来源网络，目前收集整理了1100多个poc/exp，长期更新。

Updated: 3 months, 1 week ago
1 stars 0 fork 0 watcher
Born at : March 7, 2025, 2:48 a.m. This repo has been linked 142 different CVEs too.
Profile Photo
eeeeeeeeee-code/POC

备份的漏洞库，3月开始我们来维护

Updated: 1 month ago
1382 stars 392 fork 392 watcher
Born at : March 4, 2025, 2:54 p.m. This repo has been linked 216 different CVEs too.
Profile Photo
iemotion/POC

2023HW漏洞整理，收集整理漏洞EXp/POC,大部分漏洞来源网络，目前收集整理了300多个poc/exp，长期更新。

Updated: 3 months, 3 weeks ago
1 stars 1 fork 1 watcher
Born at : March 3, 2025, 6:09 a.m. This repo has been linked 177 different CVEs too.
Profile Photo
DMW11525708/wiki

漏洞文库 wiki.wy876.cn

HTML

Updated: 1 month ago
77 stars 56 fork 56 watcher
Born at : Feb. 26, 2025, 9:46 a.m. This repo has been linked 201 different CVEs too.
Profile Photo
plzheheplztrying/cve_monitor

None

HTML Python Shell

Updated: 1 month, 2 weeks ago
0 stars 0 fork 0 watcher
Born at : Feb. 13, 2025, 8:50 a.m. This repo has been linked 891 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2024-4956 vulnerability anywhere in the article.

  • Daily CyberSecurity
Lazarus Group’s Covert Supply Chain Attack: North Korean APT Poisons Open Source to Steal Developer Secrets

Image: Sonatype In a recently expose, Sonatype reveals a covert cyberespionage campaign orchestrated by the North Korea-linked Lazarus Group, targeting developers through poisoned open source packages ... Read more

Published Date: Jul 31, 2025 (3 weeks, 3 days ago)
  • Cybersecurity News
Sonatype Nexus Repository 2 Hit By RCE (CVE-2024-5082) and XSS (CVE-2024-5083) Flaws

Sonatype has issued two security advisories for its Nexus Repository Manager 2.x, a popular repository manager used by organizations worldwide to store and distribute software artifacts, warning users ... Read more

Published Date: Nov 18, 2024 (9 months ago)

Results are limited to the first 20 news articles due to potential performance issues.

The following table lists the changes that have been made to the CVE-2024-4956 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by af854a3a-2127-422b-91ae-364da2661108

    Nov. 21, 2024

    Action Type Old Value New Value
    Added Reference https://support.sonatype.com/hc/en-us/articles/29416509323923
  • CVE Received by 103e4ec9-0a87-450b-af77-479448ddef11

    May. 16, 2024

    Action Type Old Value New Value
    Added Description Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1.
    Added Reference Sonatype https://support.sonatype.com/hc/en-us/articles/29416509323923 [No types assigned]
    Added CWE Sonatype CWE-22
    Added CVSS V3.1 Sonatype AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
Vulnerability Scoring Details
Base CVSS Score: 7.5
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact