{"id":"CVE-2024-1142","aliases":["EUVD-2024-16912","GHSA-8v58-wvr2-fj59"],"status":"published","title":"Sonatype IQ Server - Path Traversal","description":"Path Traversal in Sonatype IQ Server from version 143 allows remote authenticated attackers to overwrite or delete files via a specially crafted request. Version 171 fixes this issue.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00788,"percentile":0.56505,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2024-03-06T20:08:21Z","modified":"2026-06-17T07:03:34Z","products":[{"vendor":"sonatype","product":"iq server"}],"references":[{"url":"https://support.sonatype.com/hc/en-us/articles/27034479038739-CVE-2024-1142-Sonatype-IQ-Server-Path-Traversal-2024-03-06","tags":["vendor-advisory","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1142"},{"url":"https://github.com/advisories/GHSA-8v58-wvr2-fj59"}],"sources":{"cve":[{"id":"CVE-2024-1142","title":"Sonatype IQ Server - Path Traversal","description":"Path Traversal in Sonatype IQ Server from version 143 allows remote authenticated attackers to overwrite or delete files via a specially crafted request. Version 171 fixes this issue.","status":"published","published":"2024-03-06T20:08:21.962Z","modified":"2024-08-05T17:56:48.953Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:34:18.259965Z"}],"euvd":[{"id":"EUVD-2024-16912","description":"Path Traversal in Sonatype IQ Server from version 143 allows remote authenticated attackers to overwrite or delete files via a specially crafted request. Version 171 fixes this issue.","status":"published","published":"2024-03-06T20:08:21Z","modified":"2024-08-05T17:56:48Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T02:23:24.743229Z"}],"ghsa":[{"id":"GHSA-8v58-wvr2-fj59","title":"Path Traversal in Sonatype IQ Server from version 143 allows remote authenticated attackers to...","description":"Path Traversal in Sonatype IQ Server from version 143 allows remote authenticated attackers to overwrite or delete files via a specially crafted request. Version 171 fixes this issue.","status":"published","published":"2024-03-21T03:36:45Z","modified":"2024-03-21T03:36:53Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:55:42.57954Z"}],"nvd":[{"id":"CVE-2024-1142","description":"Path Traversal in Sonatype IQ Server from version 143 allows remote authenticated attackers to overwrite or delete files via a specially crafted request. Version 171 fixes this issue.","status":"published","published":"2024-03-21T02:51:36.04Z","modified":"2026-06-17T07:03:34.323Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:09:43.052376Z"}]}}