Skip to content
OpenAdvisories

Vendor

Artica Tech

5 known vulnerabilities.

Products

Artica Proxy 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-2056 EPSS 17%

    Artica Proxy Loopback Services Remotely Accessible Unauthenticated

    Services that are running and bound to the loopback interface on the Artica Proxy are accessible through the proxy service. In particular, the "tailon" service is running, running as the root user, is bound to the loopback interface, and is listening on TCP p…

    Artica Tech Artica Proxy github.com/gvalkov/tailon Go
  • Critical 9.8
    CVE-2024-2055

    Artica Proxy Unauthenticated File Manager Vulnerability

    The "Rich Filemanager" feature of Artica Proxy provides a web-based interface for file management capabilities. When the feature is enabled, it does not require authentication by default, and runs as the root user.

    Artica Tech Artica Proxy
  • Critical 9.8
    CVE-2024-2054 Public exploit EPSS 81%

    Artica Proxy Unauthenticated PHP Deserialization Vulnerability

    The Artica-Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user.

    Artica Tech Artica Proxy