Description
An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, allows low-privilege attacker to read systems file via XML External Entity Processing.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Progress Software | Telerik Report Server | 1.0.0.0 – < 10.0.24.514 | 10.0.24.514 |
Advisories 1
- WID-SEC-2024-3158 Progress Software Telerik Report Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 13, 2024