CVE-2024-8048

Mô tả

Tham khảo

• docs.telerik.com/reporting/knowledge-base/insecure-expression-evaluation-cve-2024-8048 · Vendor Advisory
• security.netapp.com/advisory/ntap-20250425-0004

Lỗ hổng khác của telerik reporting

• CVE-2024-6097TRUNG BÌNH 5.3In Progress® Telerik® Reporting versions prior to 2025 Q1 (19.0.25.211), information disclosure is possible by a local threat actor through …
• CVE-2024-8014CAO 8.8In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible through object injection via an i…
• CVE-2024-7840CAO 7.8In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a command injection attack is possible through improper neutralizatio…
• CVE-2024-7294TRUNG BÌNH 6.5In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), an HTTP DoS attack is possible on anonymous endpoints without r…
• CVE-2024-7293CAO 8.8In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a password brute forcing attack is possible through weak passwo…