CVE-2024-7294 — Uncontrolled resource consumption of anonymous endpoints

CVE-2024-7294

Uncontrolled resource consumption of anonymous endpoints PUBLISHED

Description (CNA)

In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), an HTTP DoS attack is possible on anonymous endpoints without rate limiting.

Affected (CNA)

Vendor / product	Versions
Progress Software Corporation / Telerik Report Server	affected 1.0.0 before 10.2.24.806

CWE

CWE-400

References

https://docs.telerik.com/report-server/knowledge-base/uncontrolled-resource-consumption-cve-2024-7294

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.