Path traversal

2024-03-1422:45:55

PRIOn knowledge base

www.prio-n.com

sonatype iq server

path traversal

remote attack

overwrite files

delete files

specially crafted request

version 143

version 171

security issue fix

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.5%

JSON

Path Traversal in Sonatype IQ Server from version 143 allows remote authenticated attackers to overwrite or delete files via a specially crafted request. Version 171 fixes this issue.

CPENameOperatorVersion
iq serverlt171

CPE	Name	Operator	Version
	iq server	lt	171

References

support.sonatype.com/hc/en-us/articles/27034479038739-CVE-2024-1142-Sonatype-IQ-Server-Path-Traversal-2024-03-06