Critical Flaw in Telerik Report Server Poses Remote Code Execution Risk
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-4358 | Authentication Bypass by Spoofing in Progress Telerik Report Server (IIS) | 9.8 | 97% | KEV | KEV |
| CVE-2024-6327 | In Progress® Telerik® Report Server versions prior to 2024 Q2 (10.1.24.709), a remote code execution attack is possible through an insecure deserialization… | 9.8 | 2% |
From the original article
1 min read at thehackernews.com
Ravie Lakshmanan Jul 26, 2024 Software Security / Vulnerability Progress Software is urging users to update their Telerik Report Server instances following the discovery of a critical security flaw that could result in remote code execution. The vulnerability, tracked as CVE-2024-6327 (CVSS score: 9. 9), impacts Report Server version 2024 Q2 (10.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.