Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2024-8015

Telerik Report Server Insecure Type Resolution

Description

In Progress Telerik Report Server versions prior to 2024 Q3 (10.2.24.924), a remote code execution attack is possible through object injection via an insecure type resolution vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software Telerik Reporting

Default version status: unaffected

  • 1.0.0.0 to < 10.2.24.924affected

References