CVE-2024-2054 Artica Proxy Unauthenticated PHP Deserialization Vulnerability

2024-03-0518:56:22

CWE-502

AHA

www.cve.org

cve-2024-2054

artica proxy

unauthenticated

php

deserialization

vulnerability

code execution

web application

www-data user

AI Score

7.7

Confidence

Low

EPSS

0.005

Percentile

75.4%

JSON

The Artica-Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the “www-data” user.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Artica Proxy",
    "vendor": "Artica Tech",
    "versions": [
      {
        "status": "affected",
        "version": "4.50"
      }
    ]
  }
]