NA

CVE-2024-2054

Published: 21/03/2024 Updated: 21/03/2024

Vulnerability Summary

The Artica-Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user.

Vulnerability Trend

Exploits

The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the www-data user Version 450 is affected ...
A command injection vulnerability in Artica Proxy appliance versions 450 and 440 allows remote attackers to run arbitrary commands via an unauthenticated HTTP request The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the www-data user ...

Github Repositories