PT-2024-18677 · Unknown · Artica Proxy

Jaggar Henry · Published 2024-03-05 · Updated 2025-08-19 · CVE-2024-2053

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions The Artica Proxy administrative web application version 4.50

Description The Artica Proxy administrative web application deserializes arbitrary PHP objects supplied by unauthenticated users, enabling code execution as the "www-data" user. The application attempts to prevent local file inclusion, but these protections can be bypassed, allowing arbitrary file requests supplied by unauthenticated users to be returned according to the privileges of the "www-data" user.

Recommendations For version 4.50, consider disabling the deserialization of PHP objects until a patch is available. Restrict access to the administrative web application to minimize the risk of exploitation. Avoid using the application until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Relative Path Traversal

Weakness Enumeration

CWE-23

Related Identifiers

CVE-2024-2053

Affected Products

Artica Proxy

References · 8

• 🔥 http://seclists.org/fulldisclosure/2024/Mar/11 · Exploit
• 🔥 https://korelogic.com/Resources/Advisories/KL-001-2024-001.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-2053 · Security Note
• https://osv.dev/vulnerability/CVE-2024-2053 · Vendor Advisory
• https://twitter.com/pdnuclei_bot/status/1957880252027531298 · Twitter Post
• https://t.me/cvenotify/89448 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1765124026811199885 · Twitter Post
• https://twitter.com/CVEnew/status/1765094005191377118 · Twitter Post