Description (CNA)
In Progress® Telerik® Report Server versions prior to 2024 Q1 (10.0.24.130), a remote code execution attack is possible through an insecure deserialization vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Progress Software Corporation / Telerik Report Server | affected 1.00 before 2024 Q1 (10.0.24.130) |
CWE
CWE-502
References
- https://www.telerik.com/report-server
- https://docs.telerik.com/report-server/knowledge-base/deserialization-vulnerability-cve-2024-1800
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.