Description

Sonatype Nexus Repository Manager 3 is vulnerable to a path traversal issue that allows unauthenticated attackers to read arbitrary files.

Remediation

Upgrade to Nexus Repository Manager version 3.68.1 or later

References

Sonatype Support Article

Related Vulnerabilities

OpenSSL Other Vulnerability (CVE-2000-0535)

Elgg Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-2935)

TCExam Other Vulnerability (CVE-2010-2153)

Oracle Database Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-5499)

Jboss EAP Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-7464)

Severity

High

Classification

CVE-2024-4956 CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Directory Traversal Known Vulnerabilities