CVE-2024-5015
EUVD-2024-4628725.06.2024, 21:16
In WhatsUp Gold versions released before 2023.1.3, an authenticated SSRF vulnerability in Wug.UI.Areas.Wug.Controllers.SessionControler.Update allows a low privileged user to chain this SSRF with an Improper Access Control vulnerability. This can be used to escalate privileges to Admin.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| progress | whatsup_gold | 𝑥 < 23.1.3 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| progress | whatsupgold | 𝑥 < 2023.1.3 | ADP |