title: Artica Proxy Unauthenticated PHP Deserialization Vulnerability
description: The Artica-Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user.
problem types: CWE-502 Deserialization of Untrusted Data
affected:
{
defaultStatus: unaffected
product: Artica Proxy
vendor: Artica Tech
versions:
status: affected, version: 4.50
}