CVE-2024-4956
Nexus Repository 3 - Path Traversal
- Published
- May 16, 2024
- Updated
- Aug 1, 2024
- Assigning CNA
- Sonatype
- Evidence observed
- Mar 28, 2025
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NModerate · next 30 days
- Percentile
- 97.2%
- Model date
- Oct 17, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1.
Sources
nexus/CVE-2024-4956
Nexus Repository Manager 3 Unauthenticated Path Traversal (CVE-2024-4956)
Vulhub vulnerability labsDeclared conditions
- lab image version: vulhub/nexus:3.68.0(nexus/CVE-2024-4956/docker-compose.yml:services.web.image)
http/cves/2024/CVE-2024-4956.yaml
Nuclei TemplatesDeclared conditions
- network: http($.protocol_keys)
- verification: dsl($.matchers[*].type)
Unauthenticated Path Traversal in Nexus Repository 3
- CVE-2024-4956Exploit
Python utility for automating CVE-2024-4956 path traversal exploitation with mass file extraction, plus custom Hashcat module for cracking Apache Shiro 1 hashes.
Unauthenticated Path Traversal in Nexus Repository 3
- CVE-2024-4956Exploit
CVE-2024-4956 : Nexus Repository Manager 3 poc exploit
Exploit for CVE-2024-4956 affecting all previous Sonatype Nexus Repository 3.x OSS/Pro versions up to and including 3.68.0
- CVE-2024-4956-Bulk-ScannerScanner
[CVE-2024-4956] Nexus Repository Manager 3 Unauthenticated Path Traversal Bulk Scanner
Multi-threaded PoC exploit scanner for CVE-2024-4956 with nuclei template integration for automated vulnerability detection and JSON output parsing.
Proof-of-concept exploit for CVE-2024-4956, a path traversal vulnerability in Sonatype Nexus Repository Manager, enabling unauthorized file read via crafted HTTP requests.
- CVE-2024-4956Exploit
POC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path Traversal
Nexus Repository 3 Path Traversal (CVE-2024-4956)
- shirocrackExploit
Simple hash cracker for Apache Shiro hashes written in Golang. Useful for exploiting CVE-2024-4956.
- CVE-2024-4956Exploit
Detection and exploitation scripts for CVE-2024-4956
- CVE-2024-4956Exploit
Nexus Repository Manager 3 Unauthenticated Path Traversal
- CVE-2024-4956Exploit
Quick and easy exploitation of CVE-2024-4956 for LFI.
- CVE-2024-4956Exploit
Sonatype Nexus Repository Manager 3 (LFI)
- Path-Traversal-CVE-2024-4956Exploit
Exploit for CVE-2024-4956, a path traversal vulnerability, demonstrating directory traversal attacks for security testing and educational purposes.
- CVE-2024-4956Exploit
CVE-2024-4956 Nuclei Template
VeryLazyTech · multiple · Mar 28, 2025
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.