cve/2024/CVE-2024-2054.md

CVE-2024-2054

Description

The Artica-Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user.

POC

Reference

• http://seclists.org/fulldisclosure/2024/Mar/12
• http://seclists.org/fulldisclosure/2024/Mar/12
• https://korelogic.com/Resources/Advisories/KL-001-2024-002.txt
• https://korelogic.com/Resources/Advisories/KL-001-2024-002.txt

Github

• https://github.com/Madan301/CVE-2024-2054
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/tanjiti/sec_profile