← Database

CVE-2024-5008

HIGH CVSS: 8.8 Published: 2024-06-25 Modified: 2026-06-17

Description

In WhatsUp Gold versions released before 2023.1.3, an authenticated user with certain permissions can upload an arbitrary file and obtain RCE using Apm.UI.Areas.APM.Controllers.Api.Applications.AppProfileImportController.

Affected Platforms

Progress Whatsup Gold

Weakness Type

CWE-434, CWE-434

References