CVE-2020-17506

Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQL injection of the apikey parameter in fw.login.php.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

93.97% chance of exploitation in the next 30 days, 100th percentile

Nuclei

critical · CWE-89

Published

2020-08-12

Updated

2024-08-04

Proof-of-concept exploits (2)

• http://packetstormsecurity.com/files/158868/Artica-Proxy-4.3.0-Authentication-Bypass.html
• http://packetstormsecurity.com/files/159267/Artica-Proxy-4.30.000000-Authentication-Bypas…

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17506.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/artica_proxy_auth_byp…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/48744

Security advisories

• https://blog.max0x4141.com/post/artica_proxy

References

• CVE Record
• NVD entry