← Back to browse · API

CVE-2024-5008

Severity
HIGH
CVSS
8.8
EPSS
0.1733
Risk score
41.27
CISA KEV
No
PoC
No
Published
2024-06-25
Modified
2024-08-01
First seen
2026-08-08
Aliases
EUVD-2024-46282, GHSA-5PRG-92HJ-2G9X
Products
Progress Software Corporation:WhatsUp Gold 2023.1.0 <2023.1.3
Sources
euvd EUVD-2024-46282

Description

In WhatsUp Gold versions released before 2023.1.3, an authenticated user with certain permissions can upload an arbitrary file and obtain RCE using Apm.UI.Areas.APM.Controllers.Api.Applications.AppProfileImportController.

References