CVE-2024-2054
The Artica-Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user.
- Affected products
- Artica Proxy
- Articatech Artica Proxy
- = 4.50.000000
- CVSS 3.1
- 9.8 CRITICAL
- EPSS
- 81.3% (100th percentile)
- Weakness
- CWE-502
- NVD status
- Analyzed
- Published
- 2024-03-05
CVE-2024-2054 at NVD
8 known exploits for CVE-2024-2054
Proof-of-concept code and exploit modules indexed by Sploitus
Artica Proxy 4.50 - Remote Code Execution (RCE)
📄 Artica Proxy 4.50 Remote Code Execution
Artica Proxy Unauthenticated PHP Deserialization Exploit
Artica Proxy Unauthenticated PHP Deserialization
Exploit for Deserialization of Untrusted Data in Articatech Artica_Proxy
Artica Proxy 4.50 Unauthenticated PHP Deserialization Vulnerability
Artica Proxy 4.50 Unauthenticated PHP Deserialization
Artica Proxy Unauthenticated PHP Deserialization Vulnerability