Unauthenticated Deserialization Vulnerability in Artica Proxy

CVE-2024-2054

What is CVE-2024-2054?

The Artica-Proxy administrative web application is vulnerable to a deserialization flaw that allows an unauthenticated attacker to send crafted payloads. This can lead to arbitrary PHP object deserialization, enabling the execution of malicious code with the privileges of the 'www-data' user. This security issue emphasizes the importance of secure coding practices and the need for input validation to prevent unauthorized access and manipulation of web application functionality.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2024-2054
Created by Rapid7

References