Skip to content
OpenAdvisories
High · 7.8 CVE-2024-0219 EUVD-2024-16018GHSA-pqpm-xc7w-528j

Privilege Elevation via Telerik JustDecompile Installer

Published Jan 31, 2024 · Updated May 29, 2025 · Assigned by ProgressSoftware

Description

In Telerik JustDecompile versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component.  In an environment where an existing Telerik JustDecompile install is present, a lower privileged user has the ability to manipulate the installation package to elevate their privileges on the underlying operating system.

Affected products

VendorProductAffectedFixed
Progress Software Telerik JustDecompile RC2012.1 – < 2024 R1 2024 R1

References