← Database

CVE-2024-4561

MEDIUM CVSS: 4.2 Published: 2024-05-14 Modified: 2026-06-17

Description

In WhatsUp Gold versions released before 2023.1.2 , a blind SSRF vulnerability exists in Whatsup Gold's FaviconController that allows an attacker to send arbitrary HTTP requests on behalf of the vulnerable server.

Affected Platforms

Progress Whatsup Gold

Weakness Type

CWE-918, CWE-918

References