CVE-2024-2054

🗓️ 05 Mar 2024 18:56:22Reported by AHAType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 109 Views🌐 WEB

Artica-Proxy web app allows unauthenticated users to execute arbitrary code

Reporter	Title	Published	Views	Family All 19
0day.today	Artica Proxy 4.50 Unauthenticated PHP Deserialization Vulnerability	6 Mar 202400:00	–	zdt
0day.today	Artica Proxy Unauthenticated PHP Deserialization Exploit	27 Mar 202400:00	–	zdt
GithubExploit	Exploit for Deserialization of Untrusted Data in Articatech Artica_Proxy	25 Mar 202407:01	–	githubexploit
BDU FSTEC	The vulnerability of the Artica Proxy proxy server management system, related to the restoration of unreliable data in memory, allows a hacker to execute arbitrary code on behalf of the “www-data” user.	28 Mar 202400:00	–	bdu_fstec
Circl	CVE-2024-2054	31 Dec 200023:00	–	circl
CNNVD	Artica Proxy Code Issue Vulnerability	9 Mar 202400:00	–	cnnvd
Cvelist	CVE-2024-2054 Artica Proxy Unauthenticated PHP Deserialization Vulnerability	5 Mar 202418:56	–	cvelist
Exploit DB	Artica Proxy 4.50 - Remote Code Execution (RCE)	9 Apr 202500:00	–	exploitdb
KoreLogic Security	Artica Proxy Unauthenticated PHP Deserialization Vulnerability	5 Mar 202400:00	–	korelogic
Metasploit	Artica Proxy Unauthenticated PHP Deserialization Vulnerability	26 Mar 202419:51	–	metasploit

NVD

Node

articatech artica_proxyMatch4.50.000000

[
  {
    "defaultStatus": "unaffected",
    "product": "Artica Proxy",
    "vendor": "Artica Tech",
    "versions": [
      {
        "status": "affected",
        "version": "4.50"
      }
    ]
  }
]

Source	Link
korelogic	www.korelogic.com/Resources/Advisories/KL-001-2024-002.txt
seclists	www.seclists.org/fulldisclosure/2024/Mar/12

Parameter	Position	Path	Description	CWE
build-js	query param	wizard/wiz.wizard.progress.php	Trigger payload through the build-js query parameter in wizard/wiz.wizard.progress.php to facilitate code execution.	CWE-502
cmd	query param	wizard/wiz.upload.php	Remote command execution via wizard/wiz.upload.php using the cmd parameter.	CWE-502

17 Jun 2026 07:23Current

9.9High risk

Vulners AI Score9.9

CVSS 3.19.8

EPSS0.8126

SSVC

CWE-502