CVE-2024-5008: Progress WhatsUp Gold

High severity, CVSS 8.8. EPSS: 17.3% chance of exploitation in the next 30 days.

In WhatsUp Gold versions released before 2023.1.3, an authenticated user with certain permissions can upload an arbitrary file and obtain RCE using Apm.UI.Areas.APM.Controllers.Api.Applications.AppProfileImportController.

Affected products

• Progress WhatsUp Gold: before 23.1.3 (fixed in 23.1.3)

Published 2024-06-25. Last modified 2026-06-17.