| |
Vulnerability CVE-2024-8015
Published: 2024-10-09
| Description: |
In Progress Telerik Report Server versions prior to 2024 Q3 (10.2.24.924), a remote code execution attack is possible through object injection via an insecure type resolution vulnerability. |
Type:
CWE-470 (Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection'))
References: |
https://docs.telerik.com/report-server/knowledge-base/insecure-type-resolution-cve-2024-8015
|
|
|
Copyright 2025, cxsecurity.com
|
|
|
