CVE Catalog
CVE-2017-17055
CriticalSummary
Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting (XSS) attack involving the username-form-id parameter to freeradius.users.php.
Risk Assessment
Exploitation of this vulnerability could lead to an attacker gaining control over the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update Artica Web Proxy to version 3.06.112911 or later to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting (XSS) attack involving the username-form-id parameter to freeradius.users.php.