Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Progress Software WhatsUp Gold — community.progress.com/s/article/Announcing-WhatsUp-Gold-v2… Clear all filters
TI-2024-04247 CVE-2024-4561 · GHSA-vpj2-mh86-xpmv

WhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via FaviconController

Priority LOW 24

In WhatsUp Gold versions released before 2023.1.2 , a blind SSRF vulnerability exists in Whatsup Gold's FaviconController that allows an attacker to send arbitrary HTTP requests on behalf of the vulnerable server.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00426 Published 2024-05-14 Fixed in 2023.1.2 CWE-918