CVE-2024-2054

概要

参考情報

• seclists.org/fulldisclosure/2024/Mar/12 · Exploit
• korelogic.com/Resources/Advisories/KL-001-2024-002.txt · Exploit

artica proxy のその他の脆弱性

• CVE-2024-2053高 7.5The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently en…
• CVE-2024-2056緊急 9.8Services that are running and bound to the loopback interface on the Artica Proxy are accessible through the proxy service. In particular, t…
• CVE-2024-2055緊急 9.8The "Rich Filemanager" feature of Artica Proxy provides a web-based interface for file management capabilities. When the feature is enabled,…
• CVE-2022-37153中 6.1An issue was discovered in Artica Proxy 4.30.000000. There is a XSS vulnerability via the password parameter in /fw.login.php.
• CVE-2021-41739緊急 9.8A OS Command Injection vulnerability was discovered in Artica Proxy 4.30.000000. Attackers can execute OS commands in cyrus.events.php with …