CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0CVE-2024-1142 – Sonatype IQ Server - Path Traversal
https://notcve.org/view.php?id=CVE-2024-1142
Path Traversal in Sonatype IQ Server from version 143 allows remote authenticated attackers to overwrite or delete files via a specially crafted request. Version 171 fixes this issue. Path Traversal en Sonatype IQ Server desde la versión 143 permite a atacantes remotos autenticados sobrescribir o eliminar archivos mediante una solicitud especialmente manipulada. La versión 171 soluciona este problema. • https://support.sonatype.com/hc/en-us/articles/27034479038739-CVE-2024-1142-Sonatype-IQ-Server-Path-Traversal-2024-03-06 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 9.0EPSS: 0%CPEs: 3EXPL: 0CVE-2019-16530
https://notcve.org/view.php?id=CVE-2019-16530
Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution. Sonatype Nexus Repository Manager versiones 2.x anteriores a 2.14.15 y versiones 3.x anteriores a 3.19, y IQ Server versiones anteriores a 72, presenta una ejecución de código remota. • https://issues.sonatype.org/secure/ReleaseNote.jspa https://support.sonatype.com/hc/en-us/articles/360036132453 • CWE-434: Unrestricted Upload of File with Dangerous Type •