CVE-2023-6365: WhatsUp Gold Stored Cross-Site Scripting (XSS) via Device Groups
In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified. It is possible for an attacker to craft a XSS payload and store that value within a device group.
If a WhatsUp Gold user interacts with the crafted payload, the attacker would be able to execute malicious JavaScript within the context of the victims browser.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6365?
CVE-2023-6365 is classified as a medium severity stored cross-site scripting (XSS) vulnerability.
How do I fix CVE-2023-6365?
To mitigate CVE-2023-6365, users should upgrade to WhatsUp Gold version 2023.1 or later.
What is the impact of CVE-2023-6365 on WhatsUp Gold users?
CVE-2023-6365 allows attackers to inject malicious scripts, potentially compromising user data and session security.
Are all versions of WhatsUp Gold affected by CVE-2023-6365?
Only versions of WhatsUp Gold released before 2023.1 are susceptible to CVE-2023-6365.
Who discovered CVE-2023-6365?
CVE-2023-6365 was identified as a security issue in WhatsUp Gold by the Progress Software security team.