CVE-2024-4357

概要

参考情報

• docs.telerik.com/report-server/knowledge-base/xxe-vulnerability-cve-2024-4357 · Vendor Advisory

telerik reporting のその他の脆弱性

• CVE-2024-6097中 5.3In Progress® Telerik® Reporting versions prior to 2025 Q1 (19.0.25.211), information disclosure is possible by a local threat actor through …
• CVE-2024-8048高 7.8In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible using object injection via insecu…
• CVE-2024-8014高 8.8In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible through object injection via an i…
• CVE-2024-7840高 7.8In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a command injection attack is possible through improper neutralizatio…
• CVE-2024-7294中 6.5In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), an HTTP DoS attack is possible on anonymous endpoints without r…