writeups.xyz / Chaining vulnerabilities to criticality in Progress WhatsUp Gold

Submitter : c2a

Date: 9 June 2022

Bounty : undisclosed

Vulnerabilities :

• SSRF
• Local File Disclosure
• Information Disclosure

Programs :

• Progress (WhatsUp Gold)

Authors :

• Shubham Shah (@Infosec_au)

Link :
https://blog.assetnote.io/2022/06/09/whatsup-gold-exploit/