Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 13/06/2024. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| report server 2024 | ≤ 10.0.24.305 |
In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free