← Database

CVE-2024-5014

HIGH CVSS: 7.1 Published: 2024-06-25 Modified: 2026-06-17

Description

In WhatsUp Gold versions released before 2023.1.3, a Server Side Request Forgery vulnerability exists in the GetASPReport feature. This allows any authenticated user to retrieve ASP reports from an HTML form.

Affected Platforms

Progress Whatsup Gold

Weakness Type

CWE-918, CWE-918

References