| Package | Affected versions | Patched versions |
|---|---|---|
| whatsup gold | < 23.1.3 | 23.1.3 |
In WhatsUp Gold versions released before 2023.1.3, an authenticated SSRF vulnerability in Wug.UI.Areas.Wug.Controllers.SessionControler.Update allows a low privileged user to chain this SSRF with an Improper Access Control vulnerability. This can be used to escalate privileges to Admin.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free