Day 4 – Nexus Repository 3 Path Traversal (CVE-2024-4956)

What: Unauthenticated path traversal lets anyone download arbitrary files with a crafted URL.
Vuln: Affects Nexus Repo 3 versions ≤ 3.68.0. Fixed in 3.68.1.
Source: Sonatype advisory + NVD.
Safety: Lab is local-only. Don’t target systems you don’t own.

Setup

docker build -t day4-nexus-4956 .
docker run -d -p 8081:8081 --name day4 day4-nexus-4956
# Boot takes ~1–2 minutes; watch: docker logs -f day4
curl -I httphttp://localhost:8081/

! If you stuck you can use ./exploit.sh (after the container is running)