Security Advisory
CVE-2024-5015
7.1
HIGH
Vulnerability Description
In WhatsUp Gold versions released before 2023.1.3, an authenticated SSRF vulnerability in Wug.UI.Areas.Wug.Controllers.SessionControler.Update allows a low privileged user to chain this SSRF with an Improper Access Control vulnerability. This can be used to escalate privileges to Admin.
Published Date
June 25, 2024
Official Source
NIST NVD Advisory