CVE-2024-4561: WhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via FaviconController
Published May 14, 2024
·Updated
In WhatsUp Gold versions released before 2023.1.2 ,
a blind SSRF vulnerability exists in Whatsup Gold's FaviconController that allows an attacker to send arbitrary HTTP requests on behalf of the vulnerable server.
Affected Software
1 affected component
Progress WhatsUp Gold<23.1.2
Event History
May 14, 2024
CVE Published
via MITRE·08:35 PM
Data Sourced
via MITRE·08:35 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Nov 19, 56910
Event
via NVD·03:17 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-4561?
CVE-2024-4561 is considered a high severity vulnerability due to its potential for blind SSRF exploitation.
2
How do I fix CVE-2024-4561?
To fix CVE-2024-4561, upgrade your WhatsUp Gold version to 2023.1.2 or later.
3
What systems are affected by CVE-2024-4561?
CVE-2024-4561 affects WhatsUp Gold versions prior to 2023.1.2.
4
What type of vulnerability is CVE-2024-4561?
CVE-2024-4561 is a blind Server-Side Request Forgery (SSRF) vulnerability.
5
How can CVE-2024-4561 be exploited?
CVE-2024-4561 can be exploited by sending arbitrary HTTP requests from the vulnerable server.