Description

Sonatype Nexus Repository Manager 3 is vulnerable to a path traversal issue that allows unauthenticated attackers to read arbitrary files.

Remediation

Upgrade to Nexus Repository Manager version 3.68.1 or later

References

Sonatype Support Article

Related Vulnerabilities

Drupal Core 8.x.x Directory Traversal (8.0.0 - 8.5.15)

Oracle Database Server Other Vulnerability (CVE-2007-3853)

Craft CMS register_argc_argv RCE (CVE-2024-56145)

Oracle Database Server CVE-2009-3411 Vulnerability (CVE-2009-3411)

MediaWiki CVE-2021-45471 Vulnerability (CVE-2021-45471)

Severity

High

Classification

CVE-2024-4956 CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Directory Traversal Known Vulnerabilities