← Database

CVE-2024-4837

MEDIUM CVSS: 5.3 Published: 2024-05-15 Modified: 2026-06-17

Description

In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via a trust boundary violation vulnerability.

Affected Platforms

Progress Telerik Report Server

Weakness Type

CWE-200, NVD-CWE-noinfo

References