← Database

CVE-2024-5017

MEDIUM CVSS: 6.5 Published: 2024-06-25 Modified: 2026-06-17

Description

In WhatsUp Gold versions released before 2023.1.3, a path traversal vulnerability exists. A specially crafted unauthenticated HTTP request to AppProfileImport can lead can lead to information disclosure.

Affected Platforms

Progress Whatsup Gold

Weakness Type

CWE-22, CWE-22

References