| Package | Affected versions | Patched versions |
|---|---|---|
| whatsup gold | < 23.1.3 | 23.1.3 |
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Path Traversal vulnerability exists Wug.UI.Areas.Wug.Controllers.SessionController.LoadNMScript. This allows allows reading of any file from the applications web-root directory .
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free