Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-7294

Uncontrolled resource consumption of anonymous endpoints

Description

In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), an HTTP DoS attack is possible on anonymous endpoints without rate limiting.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software Corporation Telerik Report Server

Default version status: unaffected

  • 1.0.0 to < 10.2.24.806affected

References