Skip to content
CVE PROGRAM SOURCE RECORD4.2 Medium

CVE-2024-4561

WhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via FaviconController

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ProgressSoftware

Description

In WhatsUp Gold versions released before 2023.1.2 , a blind SSRF vulnerability exists in Whatsup Gold's FaviconController that allows an attacker to send arbitrary HTTP requests on behalf of the vulnerable server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software Corporation WhatsUp Gold

Default version status: affected

  • 2023.1.0 to < 2023.1.2affected

References