CVE-2024-1800

Summary

In Progress® Telerik® Report Server versions prior to 2024 Q1 (10.0.24.130), a remote code execution attack is possible through an insecure deserialization vulnerability.

Affected Software

Weaknesses

• CWE-502: CWE-502 Deserialization of Untrusted Data

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

CVE Program Container

Additional References

• https://www.telerik.com/report-server
• https://docs.telerik.com/report-server/knowledge-base/deserialization-vulnerability-cve-2024-1800

References

• https://www.telerik.com/report-server
• https://docs.telerik.com/report-server/knowledge-base/deserialization-vulnerability-cve-2024-1800

• ←Previous
• Next→