CVE-2024-6327

In Progress® Telerik® Report Server versions prior to 2024 Q2 (10.1.24.709), a remote code execution attack is possible through an insecure deserialization vulnerability.
Configurations

Configuration 1 (hide)

cpe:2.3:a:progress:telerik_report_server:*:*:*:*:*:*:*:*

History

26 Jul 2024, 13:03

Type Values Removed Values Added
CPE cpe:2.3:a:progress:telerik_report_server:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : 9.9
v2 : unknown
v3 : 9.8
First Time Progress telerik Report Server
Progress
References () https://docs.telerik.com/report-server/knowledge-base/deserialization-vulnerability-cve-2024-6327 - () https://docs.telerik.com/report-server/knowledge-base/deserialization-vulnerability-cve-2024-6327 - Vendor Advisory
References () https://www.telerik.com/report-server - () https://www.telerik.com/report-server - Product
Summary
  • (es) En las versiones de Progress® Telerik® Report Server anteriores al segundo trimestre de 2024 (10.1.24.709), es posible un ataque de ejecución remota de código a través de una vulnerabilidad de deserialización insegura.

24 Jul 2024, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-07-24 14:15

Updated : 2024-07-26 13:03


NVD link : CVE-2024-6327

Mitre link : CVE-2024-6327

CVE.ORG link : CVE-2024-6327


JSON object : View

Products Affected

progress

  • telerik_report_server
CWE
CWE-502

Deserialization of Untrusted Data