| |
Vulnerability CVE-2024-7840
Published: 2024-10-09
| Description: |
In Progress Telerik Reporting versions prior to 2024 Q3 (2024.3.924), a command injection attack is possible through improper neutralization of hyperlink elements. |
Type:
CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection'))
References: |
https://docs.telerik.com/reporting/knowledge-base/command-injection-cve-2024-7840
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
