Skip to content
NewA calmer, faster ZeroHour

Experts released PoC exploit code for a critical bug in Progress Telerik Report Servers

Security Affairsby @securityaffairs ()2 min read2
Analyze CVE-2024-4358 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2024-1800
In Progress® Telerik® Report Server versions prior to 2024 Q1 (10.0.24.130), a remote code execution attack is possible through an insecure deserialization…
8.840%
CVE-2024-4358
Authentication Bypass by Spoofing in Progress Telerik Report Server (IIS)
9.897%KEV
KEV

From the original article

2 min read at securityaffairs.com

Researchers published a PoC exploit code for an authentication bypass vulnerability on Progress Telerik Report Servers. Researchers published a proof-of-concept (PoC) exploit code for an authentication bypass vulnerability on Progress Telerik Report Servers. Telerik Report Server is an end-to-end report management solution developed by Progress® Telerik.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.