Artica Proxy 4.30.000000 OS Command Injection Vulnerability

Artica Proxy 4.30.000000 OS Command Injection Vulnerability

CVE-2021-41739 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A OS Command Injection vulnerability was discovered in Artica Proxy 4.30.000000. Attackers can execute OS commands in cyrus.events.php with GET param logs and POST param rp.

Learn more about our Web Application Penetration Testing UK.