Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2024-1142

Sonatype IQ Server - Path Traversal

Description

Path Traversal in Sonatype IQ Server from version 143 allows remote authenticated attackers to overwrite or delete files via a specially crafted request. Version 171 fixes this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sonatype IQ Server

Default version status: unaffected

  • 143 to < 171affected

References