The Artica-Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user.
References
Configurations
No configuration.
History
21 Nov 2024, 09:08
Type | Values Removed | Values Added |
---|---|---|
References | () http://seclists.org/fulldisclosure/2024/Mar/12 - | |
References | () https://korelogic.com/Resources/Advisories/KL-001-2024-002.txt - |
05 Aug 2024, 20:35
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
21 Mar 2024, 02:52
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-03-21 02:52
Updated : 2024-11-21 09:08
NVD link : CVE-2024-2054
Mitre link : CVE-2024-2054
CVE.ORG link : CVE-2024-2054
JSON object : View
Products Affected
No product.
CWE
CWE-502
Deserialization of Untrusted Data