Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2024-4561

Published: 14/05/2024 Updated: 15/05/2024

Vulnerability Summary

In WhatsUp Gold versions released prior to 2023.1.2 , a blind SSRF vulnerability exists in Whatsup Gold's FaviconController that allows an malicious user to send arbitrary HTTP requests on behalf of the vulnerable server.

References

https://www.progress.com/network-monitoringhttps://community.progress.com/s/article/Announcing-WhatsUp-Gold-v2023-1-2https://nvd.nist.govhttps://www.zerodayinitiative.com/advisories/ZDI-24-517/
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49223CVE-2024-0044information disclosureCVE-2024-35753HTML injectionCVE-2024-21306CVE-2024-35733SQL injectionCVE-2024-35732
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook