CVE-2024-6671

Critical · 9.8

CVSS

9.8

EPSS

19.0%

Published

Aug 29, 2024

CISA due date

—

The record

In WhatsUp Gold versions released before 2024.0.0, if the application is configured with only a single user, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password.

Affected packages

Ecosystem	Package	Introduced	Fixed