Description
In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a local threat actor through an insecure deserialization vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Progress Software | Telerik Reporting | Q1 2007 – < 2024 Q1 (18.0.24.130) | 2024 Q1 (18.0.24.130) |