CVE-2024-4562
Last modified
CVE-2024-4562 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. In WhatsUp Gold versions released before 2023.1.2 , an SSRF vulnerability exists in Whatsup Gold's Issue exists in the HTTP Monitoring functionality. Due to the lack of proper authorization, any authenticated user can access the HTTP monitoring functionality, what leads to the Server Side Request Forgery. . EPSS estimates a 0.38% chance of exploitation in the next 30 days.
Description
In WhatsUp Gold versions released before 2023.1.2 , an SSRF vulnerability exists in Whatsup Gold's Issue exists in the HTTP Monitoring functionality. Due to the lack of proper authorization, any authenticated user can access the HTTP monitoring functionality, what leads to the Server Side Request Forgery.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Progress | Whatsup Gold | < 23.1.2 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-4562?
How severe is CVE-2024-4562?
How do I fix CVE-2024-4562?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-45614Puma is a Ruby/Rack web server built for parallelism. In aff…5.4
- CVE-2024-45615A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 m…3.9
- CVE-2024-45616A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 m…3.9
- CVE-2024-45617A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 m…3.9
- CVE-2024-45618A vulnerability was found in pkcs15-init in OpenSC. An attac…3.9
- CVE-2024-45619A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 m…4.3
- CVE-2024-45620A vulnerability was found in the pkcs15-init tool in OpenSC.…3.9
- CVE-2024-45621The Electron desktop application of Rocket.Chat through 6.3.…5.4
- CVE-2024-45622ASIS (aka Aplikasi Sistem Sekolah using CodeIgniter 3) 3.0.0…9.8
- CVE-2024-45623D-Link DAP-2310 Hardware A Firmware 1.16RC028 allows remote …9.8
- CVE-2024-45624Exposure of sensitive information due to incompatible polici…7.5
- CVE-2024-45625Cross-site scripting vulnerability exists in Forminator vers…6.1
Are you affected by CVE-2024-4562?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST