Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-5018

WhatsUp Gold LoadUsingBasePath Directory Traversal Information Disclosure Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ProgressSoftware

Description

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Path Traversal vulnerability exists Wug.UI.Areas.Wug.Controllers.SessionController.LoadNMScript. This allows allows reading of any file from the applications web-root directory .

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software Corporation WhatsUp Gold

Default version status: affected

  • 2023.1.0 to < 2023.1.3affected

References