In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), an HTTP DoS attack is possible on anonymous endpoints without rate limiting.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HProgress Telerik Reporting
APPProgress< 10.2.24.806
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Powiązane podatności
CVE-2024-8048HIGH7.8ten sam produkt
In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible usi...
CVE-2024-7293HIGH7.5ten sam produkt
In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a password brute forcing attack i...
CVE-2024-8014HIGH8.8ten sam produkt
In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible thr...
CVE-2024-7840HIGH7.8ten sam produkt
In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a command injection attack is possible ...
CVE-2024-6096HIGH8.8ten sam produkt
In Progress® Telerik® Reporting versions prior to 18.1.24.709, a code execution attack is possible through obj...