Description
In Progress® Telerik® Report Server versions prior to 2024 Q2 (10.1.24.709), a remote code execution attack is possible through an insecure deserialization vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Progress Software | Telerik Report Server | 1.00 – < 2024 Q2 (10.1.24.709) | 2024 Q2 (10.1.24.709) |
Advisories 1
- WID-SEC-2024-1716 Progress Software Telerik Report Server: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Jul 25, 2024