Podatność CVE-2024-8015
Publikacja: 2024-10-09

Opis:
In Progress Telerik Report Server versions prior to 2024 Q3 (10.2.24.924), a remote code execution attack is possible through object injection via an insecure type resolution vulnerability.

Typ:

CWE-470

 (Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection'))

 Referencje:
https://docs.telerik.com/report-server/knowledge-base/insecure-type-resolution-cve-2024-8015
Copyright 2024, cxsecurity.com

 

Back to Top