CVE-2024-5014: WhatsUp Gold GetASPReport Server-Side Request Forgery Information Disclosure
Published Jun 25, 2024
·Updated
In WhatsUp Gold versions released before 2023.1.3, a Server Side Request Forgery vulnerability exists in the GetASPReport feature. This allows any authenticated user to retrieve ASP reports from an HTML form.
Affected Software
1 affected component
Progress WhatsUp Gold<23.1.3
Event History
Jun 25, 2024
CVE Published
via MITRE·08:13 PM
Data Sourced
via MITRE·08:13 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-5014?
CVE-2024-5014 is considered a high-severity vulnerability due to its potential for Server Side Request Forgery.
2
How do I fix CVE-2024-5014?
To fix CVE-2024-5014, upgrade WhatsUp Gold to version 2023.1.3 or later.
3
Who is affected by CVE-2024-5014?
CVE-2024-5014 affects authenticated users of WhatsUp Gold versions prior to 2023.1.3.
4
What does CVE-2024-5014 exploit?
CVE-2024-5014 exploits a vulnerability in the GetASPReport feature, allowing unauthorized access to ASP reports.
5
When was CVE-2024-5014 disclosed?
CVE-2024-5014 was disclosed in June 2024.