Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-8014

Telerik Reporting EntityDataSource Insecure Type Resolution

Description

In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible through object injection via an insecure type resolution vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software Telerik Reporting

Default version status: unaffected

  • 18.2.24.806 to < 18.2.24.924affected

References