{"uuid": "f0addea0-9a2e-4099-9ac1-f03c6b0714d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2054", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/artica_proxy_unauth_rce_cve_2024_2054.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd, x64, x86\", \"author\": [\"h00die-gr3y \", \"Jaggar Henry of KoreLogic Inc.\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"A Command Injection vulnerability in Artica Proxy appliance version 4.50 and 4.40\\n          allows remote attackers to run arbitrary commands via unauthenticated HTTP request.\\n          The Artica Proxy administrative web application will deserialize arbitrary PHP objects\\n          supplied by unauthenticated users and subsequently enable code execution as the \\\"www-data\\\" user.\", \"disclosure_date\": \"2024-03-05\", \"fullname\": \"exploit/linux/http/artica_proxy_unauth_rce_cve_2024_2054\", \"is_install_path\": true, \"mod_time\": \"2026-06-02 10:32:30 +0000\", \"name\": \"Artica Proxy Unauthenticated PHP Deserialization Vulnerability\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/artica_proxy_unauth_rce_cve_2024_2054.rb\", \"platform\": \"Linux,PHP,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/artica_proxy_unauth_rce_cve_2024_2054\", \"references\": [\"CVE-2024-2054\", \"EDB-52146\", \"URL-https://attackerkb.com/topics/q1JUcEJjXZ/cve-2024-2054\", \"PACKETSTORM-177482\"], \"rport\": 9000, \"session_types\": false, \"targets\": [\"PHP\", \"Unix Command\", \"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:23.149242Z"}