CVE-2024-4956 PoC — Nexus Repository 3 - Path Traversal

Description

Nexus Repository 3 Path Traversal (CVE-2024-4956)

Readme

# Day 4 – Nexus Repository 3 Path Traversal (CVE-2024-4956)

**What:** Unauthenticated path traversal lets anyone download arbitrary files with a crafted URL.  
**Vuln:** Affects Nexus Repo 3 versions **≤ 3.68.0**. Fixed in **3.68.1**.  
**Source:** Sonatype advisory + NVD.  
**Safety:** Lab is local-only. Don’t target systems you don’t own.

## Setup

```bash
docker build -t day4-nexus-4956 .
docker run -d -p 8081:8081 --name day4 day4-nexus-4956
# Boot takes ~1–2 minutes; watch: docker logs -f day4
curl -I httphttp://localhost:8081/
```

! If you stuck you can use ./exploit.sh (after the container is running)

File Snapshot

Remarks