Podatność CVE-2024-8048
Publikacja: 2024-10-09

Opis:
In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible using object injection via insecure expression evaluation.

Typ:

CWE-470

 (Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection'))

 Referencje:
https://docs.telerik.com/reporting/knowledge-base/insecure-expression-evaluation-cve-2024-8048
Copyright 2024, cxsecurity.com

 

Back to Top