CVE-2020-13158 Scanner

Artica Proxy is a comprehensive proxy server solution used by organizations to filter, cache, and control internet traffic. It provides network administrators with tools to enforce security policies, monitor usage, and optimize bandwidth. The Community Edition is a free, open-source version widely deployed in small to medium businesses for its robust features without licensing costs.

CVE-2020-13158 is a directory traversal vulnerability that arises from insufficient input validation in the fw.progrss.details.php script. The popup parameter fails to sanitize user-supplied paths, allowing an attacker to traverse directories using sequences like ../. This flaw enables unauthorized access to files outside the intended web root.

Specifically, the vulnerable endpoint is /fw.progrss.details.php, where the popup parameter accepts a file path without proper filtering. An attacker can craft a request such as /fw.progrss.details.php?popup=../../etc/passwd to retrieve sensitive system files. The vulnerability exists in Artica Proxy Community Edition versions before 4.30.0.

If exploited, an attacker can read arbitrary files on the server, including configuration files, credentials, and sensitive data. This could lead to privilege escalation, data breaches, or further compromise of the network. The CVSS score of 7.5 reflects the high impact and ease of exploitation, making it critical to address promptly.