Directory Traversal Vulnerability in Artica Proxy by Artica
CVE-2021-40680

8.1HIGH

Key Information:

Vendor

Articatech

Status
Web Proxy
Vendor
CVE Published:
25 April 2022

What is CVE-2021-40680?

A Directory Traversal vulnerability exists in Artica Proxy, allowing attackers to manipulate the filename parameter sent to the /cgi-bin/main.cgi endpoint. This flaw could potentially enable unauthorized access to sensitive files outside the intended directory structure, ultimately compromising the application's security and user data integrity. Users are encouraged to review the references for mitigation strategies.

References

http://seclists.org/fulldisclosure/2022/Apr/39
mailing-listx_refsource_FULLDISC

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.