Description
In Progress Telerik Report Server versions prior to 2024 Q3 (10.2.24.924), a remote code execution attack is possible through object injection via an insecure type resolution vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Progress Software | Telerik Reporting | 1.0.0.0 – < 10.2.24.924 | 10.2.24.924 |
Advisories 1
- WID-SEC-2024-3158 Progress Software Telerik Report Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 13, 2024