{"api_version":"1","generated_at":"2026-07-23T15:43:48+00:00","cve":"CVE-2020-15051","urls":{"html":"https://cve.report/CVE-2020-15051","api":"https://cve.report/api/cve/CVE-2020-15051.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2020-15051","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-15051"},"summary":{"title":"CVE-2020-15051","description":"An issue was discovered in Artica Proxy before 4.30.000000. Stored XSS exists via the Server Domain Name, Your Email Address, Group Name, MYSQL Server, Database, MYSQL Username, Group Name, and Task Description fields.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2020-07-15 21:15:00","updated_at":"2020-07-21 14:28:00"},"problem_types":["CWE-79"],"metrics":[],"references":[{"url":"http://artica-proxy.com/telechargements/","name":"http://artica-proxy.com/telechargements/","refsource":"MISC","tags":["Vendor Advisory"],"title":"Artica Proxy | Internet Proxy and Web filtering","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://github.com/pratikshad19/CVE-2020-15051","name":"https://github.com/pratikshad19/CVE-2020-15051","refsource":"MISC","tags":["Exploit","Third Party Advisory"],"title":"GitHub - pratikshad19/CVE-2020-15051: CVE-2020-15051 : Artica Proxy before 4.30.000000 Community Edition allows Stored Cross Site Scripting.","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-15051","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15051","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2020","cve_id":"15051","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"articatech","cpe5":"artica_proxy","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"community","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"15051","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"articatech","cpe5":"artica_proxy","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"community","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2020-15051","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An issue was discovered in Artica Proxy before 4.30.000000. Stored XSS exists via the Server Domain Name, Your Email Address, Group Name, MYSQL Server, Database, MYSQL Username, Group Name, and Task Description fields."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"url":"http://artica-proxy.com/telechargements/","refsource":"MISC","name":"http://artica-proxy.com/telechargements/"},{"refsource":"MISC","name":"https://github.com/pratikshad19/CVE-2020-15051","url":"https://github.com/pratikshad19/CVE-2020-15051"}]}},"nvd":{"publishedDate":"2020-07-15 21:15:00","lastModifiedDate":"2020-07-21 14:28:00","problem_types":["CWE-79"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":2.7},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"severity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:articatech:artica_proxy:*:*:*:*:community:*:*:*","versionEndExcluding":"4.30.000000","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2020","CveId":"15051","Ordinal":"176430","Title":"CVE-2020-15051","CVE":"CVE-2020-15051","Year":"2020"},"notes":[{"CveYear":"2020","CveId":"15051","Ordinal":"1","NoteData":"An issue was discovered in Artica Proxy before 4.30.000000. Stored XSS exists via the Server Domain Name, Your Email Address, Group Name, MYSQL Server, Database, MYSQL Username, Group Name, and Task Description fields.","Type":"Description","Title":null},{"CveYear":"2020","CveId":"15051","Ordinal":"2","NoteData":"2020-07-15","Type":"Other","Title":"Published"},{"CveYear":"2020","CveId":"15051","Ordinal":"3","NoteData":"2020-07-15","Type":"Other","Title":"Modified"}]}}}