Skip to content
OpenAdvisories

Vendor

Artica Tech

5 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • High 7.5

    Artica Proxy 4.50 Session Fixation via fw.login.php

    Artica Proxy before 4.50.000000 Service Pack 7 (fixed in hotfix 20260724-02) contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authenti…

  • High 7.5
    CVE-2024-2053 Public exploit Scanner template EPSS 45%

    Artica Proxy Unauthenticated LFI Protection Bypass Vulnerability

    The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy adminis…