CVE-2024-2055criticalCWE-288CWE-552

CVE-2024-2055: critical vulnerability in Artica Proxy

Artica Proxy Unauthenticated File Manager Vulnerability

Published · Updated

Follow this CVE+ Monitor Artica Proxy

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 0.9%
The "Rich Filemanager" feature of Artica Proxy provides a web-based interface for file management capabilities. When the feature is enabled, it does not require authentication by default, and runs as the root user.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Artica Tech · Artica Proxy
Related CVEs — Artica Proxy

In the same product, most dangerous first.

CVE-2024-2054CRITICALArtica Proxy Unauthenticated PHP Deserialization VulnerabilityEPSS 81.3%CVE-2024-2053HIGHArtica Proxy Unauthenticated LFI Protection Bypass VulnerabilityEPSS 44.6%CVE-2024-2056CRITICALArtica Proxy Loopback Services Remotely Accessible UnauthenticatedEPSS 16.7%