CVE-2024-8048

Description

References

• docs.telerik.com/reporting/knowledge-base/insecure-expression-evaluation-cve-2024-8048 · Vendor Advisory
• security.netapp.com/advisory/ntap-20250425-0004

Autres vulnérabilités de telerik reporting

• CVE-2024-6097MOYENNE 5.3In Progress® Telerik® Reporting versions prior to 2025 Q1 (19.0.25.211), information disclosure is possible by a local threat actor through …
• CVE-2024-8014ÉLEVÉE 8.8In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible through object injection via an i…
• CVE-2024-7840ÉLEVÉE 7.8In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a command injection attack is possible through improper neutralizatio…
• CVE-2024-7294MOYENNE 6.5In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), an HTTP DoS attack is possible on anonymous endpoints without r…
• CVE-2024-7293ÉLEVÉE 8.8In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a password brute forcing attack is possible through weak passwo…