Skip to content
OpenAdvisories
High · 8.8 CVE-2024-6096 EUVD-2024-47248GHSA-g2m5-6x74-9mv6

Unsafe Deserialization Vulnerability

Published Jul 24, 2024 · Updated Apr 25, 2025 · Assigned by ProgressSoftware

Description

In Progress® Telerik® Reporting versions prior to 18.1.24.709, a code execution attack is possible through object injection via an insecure type resolution vulnerability.

Affected products

VendorProductAffectedFixed
Progress Software Telerik Reporting 1.0.0 – < 18.1.24.709 18.1.24.709

References