CVE-2024-4561 Information

Description

In WhatsUp Gold versions released before 2023.1.2

a blind SSRF vulnerability exists in Whatsup Gold’s FaviconController that allows an attacker to send arbitrary HTTP requests on behalf of the vulnerable server.

Reference

https://www.progress.com/network-monitoring https://community.progress.com/s/article/Announcing-WhatsUp-Gold-v2023-1-2

Share on: