Assigner | ProgressSoftware |
Reserved | 2024-05-13 |
Published | 2024-05-15 |
Updated | 2024-06-06 |
Description
In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via a trust boundary violation vulnerability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Problem types
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Product status
1.0.0.0 before 10.1.24.514
Credits
Christian Kuersteiner (Greenbone AG) via BugCrowd
References
https://docs.telerik.com/report-server/knowledge-base/information-exposure-cve-2024-4837