{"uuid": "bcc0f692-4edf-4b7a-ab55-b382e03651ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-17505", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/artica_proxy_auth_bypass_service_cmds_peform_command_injection.rb", "content": "{\"aliases\": [], \"arch\": \"cmd, x86, x64\", \"author\": [\"Max0x4141\", \"Redouane NIBOUCHA \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an authenticated command injection vulnerability in Artica Proxy, combined with an authentication bypass\\n          discovered on the same version, it is possible to trigger the vulnerability without knowing the credentials.\\n          The application runs in virtual appliance, successful exploitation of this vulnerability yields remote code execution as root on the\\n          remote system.\", \"disclosure_date\": \"2020-08-09\", \"fullname\": \"exploit/linux/http/artica_proxy_auth_bypass_service_cmds_peform_command_injection\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"Artica proxy 4.30.000000 Auth Bypass service-cmds-peform Command Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/artica_proxy_auth_bypass_service_cmds_peform_command_injection.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/artica_proxy_auth_bypass_service_cmds_peform_command_injection\", \"references\": [\"CVE-2020-17505\", \"CVE-2020-17506\", \"EDB-48744\", \"PACKETSTORM-158868\", \"URL-https://blog.max0x4141.com/post/artica_proxy/\"], \"rport\": 9000, \"session_types\": false, \"targets\": [\"Unix Command\", \"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:22.926891Z"}