Description
In WhatsUp Gold versions released before 2023.1.2 ,
a blind SSRF vulnerability exists in Whatsup Gold's FaviconController that allows an attacker to send arbitrary HTTP requests on behalf of the vulnerable server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Progress Software | WhatsUp Gold | 2023.1.0 – < 2023.1.2 | 2023.1.2 |