CVE:CVE-2021-40680
CNNVD:CNNVD-202204-4309
Artica Proxy是法国Artica公司的一款开源的Artica代理解决方案。
Artica Proxy VMWare Appliance 4.30.000000 SP273及其之前版本和Artica Proxy 4.30.000000 SP206到SP255版本存在安全漏洞，该漏洞源于/cgi-bin/main.cgi中的文件名参数缺少过滤，导致目录遍历漏洞。
solution:Upgrade articatech web_proxy to a higher version than 4.30.000000:sp206,4.30.000000:sp255,4.30.000000:sp267,4.30.000000:sp268,4.30.000000:sp269,4.30.000000:sp270,4.30.000000:sp271,4.30.000000:sp272,4.30.000000:sp273,and avoid the version 4.30.000000:sp206,4.30.000000:sp255,4.30.000000:sp267,4.30.000000:sp268,4.30.000000:sp269,4.30.000000:sp270,4.30.000000:sp271,4.30.000000:sp272,4.30.000000:sp273