PT-2024-5211 · Telerik · Telerik Report Server
CVE-2024-6327
·
Published
2024-07-24
·
Updated
2024-08-15
CVSS v3.1
9.9
Critical
| Vector | AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
In Progress Telerik Report Server versions prior to 2024 Q2 (10.1.24.709)
Description:
The issue is related to an insecure deserialization vulnerability in the Telerik Report Server, which can be exploited to allow a remote attacker to execute arbitrary code. This poses a significant risk to data and systems.
Recommendations:
For versions prior to 2024 Q2 (10.1.24.709), update to version 2024 Q2 (10.1.24.709) or later to resolve the issue. As a temporary workaround, consider restricting access to the deserialization mechanism to minimize the risk of exploitation.
Fix
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Telerik Report Server