CVE-2024-7840

概要

参考情報

• docs.telerik.com/reporting/knowledge-base/command-injection-cve-2024-7840 · Vendor Advisory
• security.netapp.com/advisory/ntap-20250425-0004

telerik reporting のその他の脆弱性

• CVE-2024-6097中 5.3In Progress® Telerik® Reporting versions prior to 2025 Q1 (19.0.25.211), information disclosure is possible by a local threat actor through …
• CVE-2024-8048高 7.8In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible using object injection via insecu…
• CVE-2024-8014高 8.8In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible through object injection via an i…
• CVE-2024-7294中 6.5In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), an HTTP DoS attack is possible on anonymous endpoints without r…
• CVE-2024-7293高 8.8In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a password brute forcing attack is possible through weak passwo…