CVE-2024-6327

Summary

In Progress® Telerik® Report Server versions prior to 2024 Q2 (10.1.24.709), a remote code execution attack is possible through an insecure deserialization vulnerability.

Affected Software

Weaknesses

• CWE-502: CWE-502 Deserialization of Untrusted Data

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

CVE Program Container

Additional References

• https://www.telerik.com/report-server
• https://docs.telerik.com/report-server/knowledge-base/deserialization-vulnerability-cve-2024-6327

References

• https://www.telerik.com/report-server
• https://docs.telerik.com/report-server/knowledge-base/deserialization-vulnerability-cve-2024-6327

• ←Previous
• Next→