CVE-2024-4561

Опубликовано: 14 мая 2024

Источник: nvd

CVSS3: 4.2

CVSS3: 5.3

EPSS Низкий

Описание

In WhatsUp Gold versions released before 2023.1.2 ,

a blind SSRF vulnerability exists in Whatsup Gold's FaviconController that allows an attacker to send arbitrary HTTP requests on behalf of the vulnerable server.

Ссылки

https://community.progress.com/s/article/Announcing-WhatsUp-Gold-v2023-1-2
Vendor Advisory
https://www.progress.com/network-monitoring
Product
https://community.progress.com/s/article/Announcing-WhatsUp-Gold-v2023-1-2
Vendor Advisory
https://www.progress.com/network-monitoring
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:progress:whatsup_gold:*:*:*:*:*:*:*:*

Версия до 23.1.2 (исключая)

EPSS

Процентиль: 51%

0.00281

Низкий

4.2 Medium

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-918

Связанные уязвимости

GHSA-vpj2-mh86-xpmv

CVSS3: 4.2

github

больше 1 года назад

In WhatsUp Gold versions released before 2023.1.2 , a blind SSRF vulnerability exists in Whatsup Gold's FaviconController that allows an attacker to send arbitrary HTTP requests on behalf of the vulnerable server.

EPSS

Процентиль: 51%

0.00281

Низкий

4.2 Medium

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-918