Loading HuntDB...

GHSA-qcj6-wq2r-c3xh

GitHub Security Advisory

⚠ Unreviewed CRITICAL Has CVE

Advisory Details

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.  The

WhatsUp.ExportUtilities.Export.GetFileWithoutZip

allows execution of commands with iisapppool\nmconsole privileges.

Related CVEs

Key Information

GHSA ID
GHSA-qcj6-wq2r-c3xh
Published
June 25, 2024 9:31 PM
Last Modified
June 25, 2024 9:31 PM
CVSS Score
9.0 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: July 27, 2025 6:35 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.