CVE-2024-8014

Summary

In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible through object injection via an insecure type resolution vulnerability.

Affected Software

Weaknesses

• CWE-470: CWE-470 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

CVE Program Container

Additional References

• https://security.netapp.com/advisory/ntap-20250425-0004/

References

• https://docs.telerik.com/reporting/knowledge-base/insecure-type-resolution-cve-2024-8014

• ←Previous
• Next→