{"vulnerability": "CVE-2024-2054", "sightings": [{"uuid": "49dd1f27-6d11-4834-8edd-085697f44783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20540", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113442108664352339", "content": "", "creation_timestamp": "2024-11-07T14:20:08.127789Z"}, {"uuid": "f50610d4-8037-48a8-83b0-1ce3db91c2de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20540", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113442108664352339", "content": "", "creation_timestamp": "2024-11-07T14:20:08.583774Z"}, {"uuid": "977ccdcd-b5b7-4f7d-9c58-e04829b83824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20540", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113442108664352339", "content": "", "creation_timestamp": "2024-11-07T14:20:08.852186Z"}, {"uuid": "cb28c3e0-620d-4567-9669-0ca8b9f11f45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2054", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "08eca009-31d7-4ae5-aaf7-e35586a15e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2054", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:00.000000Z"}, {"uuid": "b582a722-f25b-4fb0-bfba-d85f2ba9e55d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2054", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lmei6kc6jh2i", "content": "", "creation_timestamp": "2025-04-09T07:37:09.585277Z"}, {"uuid": "8152310b-80e9-4825-855a-444d1889b4f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2054", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmifndtp6d2x", "content": "", "creation_timestamp": "2025-04-10T21:02:17.779400Z"}, {"uuid": "5f9f44ae-dfac-471c-932d-8c9944f4136c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2054", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:02.000000Z"}, {"uuid": "c7070954-8edf-4be0-9318-a9bdec2c55d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2054", "type": "seen", "source": "http://takeonme.org/cve/", "content": "", "creation_timestamp": "2000-12-31T23:00:00.000000Z"}, {"uuid": "f11ee0e6-f11b-4838-ba46-a9df8a8f15c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2054", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/artica_proxy_unauth_rce_cve_2024_2054.rb", "content": "", "creation_timestamp": "2024-03-25T20:41:44.000000Z"}, {"uuid": "9b4efa86-11f5-48b1-b760-e4a99fb55660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20540", "type": "seen", "source": "https://t.me/cvedetector/10016", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-20540 - Cisco Unified CCMP Stored Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-20540 \nPublished : Nov. 6, 2024, 5:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) could allow an authenticated, remote attacker with low privileges to conduct a stored cross-site scripting (XSS) attack against a user of the interface.  \n  \nThis vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into a specific page of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information. To exploit this vulnerability, the attacker must have at least a Supervisor role on an affected device. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T19:10:36.000000Z"}, {"uuid": "f0addea0-9a2e-4099-9ac1-f03c6b0714d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2054", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/artica_proxy_unauth_rce_cve_2024_2054.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd, x64, x86\", \"author\": [\"h00die-gr3y \", \"Jaggar Henry of KoreLogic Inc.\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"A Command Injection vulnerability in Artica Proxy appliance version 4.50 and 4.40\\n          allows remote attackers to run arbitrary commands via unauthenticated HTTP request.\\n          The Artica Proxy administrative web application will deserialize arbitrary PHP objects\\n          supplied by unauthenticated users and subsequently enable code execution as the \\\"www-data\\\" user.\", \"disclosure_date\": \"2024-03-05\", \"fullname\": \"exploit/linux/http/artica_proxy_unauth_rce_cve_2024_2054\", \"is_install_path\": true, \"mod_time\": \"2026-06-02 10:32:30 +0000\", \"name\": \"Artica Proxy Unauthenticated PHP Deserialization Vulnerability\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/artica_proxy_unauth_rce_cve_2024_2054.rb\", \"platform\": \"Linux,PHP,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/artica_proxy_unauth_rce_cve_2024_2054\", \"references\": [\"CVE-2024-2054\", \"EDB-52146\", \"URL-https://attackerkb.com/topics/q1JUcEJjXZ/cve-2024-2054\", \"PACKETSTORM-177482\"], \"rport\": 9000, \"session_types\": false, \"targets\": [\"PHP\", \"Unix Command\", \"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:23.149242Z"}]}