← Database

CVE-2024-8015

CRITICAL CVSS: 9.1 Published: 2024-10-09 Modified: 2026-06-17

Description

In Progress Telerik Report Server versions prior to 2024 Q3 (10.2.24.924), a remote code execution attack is possible through object injection via an insecure type resolution vulnerability.

Affected Platforms

Progress Telerik Report Server

Weakness Type

CWE-470

References