The Artica-Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user.
References
Configurations
No configuration.
History
05 Aug 2024, 20:35
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
21 Mar 2024, 02:52
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-03-21 02:52
Updated : 2024-08-05 20:35
NVD link : CVE-2024-2054
Mitre link : CVE-2024-2054
CVE.ORG link : CVE-2024-2054
JSON object : View
Products Affected
No product.
CWE
CWE-502
Deserialization of Untrusted Data