writeups.xyz / WhatsUp Gold Pre-Auth RCE GetFileWithoutZip Primitive (CVE-2024-4885)

Submitter : c2a

Date: 8 July 2024

Bounty : undisclosed

Vulnerabilities :

• RCE
• Path Traversal
• Security Code Review

Programs :

• Progress (WhatsUp Gold)

Authors :

• Sina Kheirkhah (@SinSinology)

Link :
https://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/