Vulnerability CVE-2024-8048


Published: 2024-10-09

Description:
In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible using object injection via insecure expression evaluation.

Type:

CWE-470

(Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection'))

 References:
https://docs.telerik.com/reporting/knowledge-base/insecure-expression-evaluation-cve-2024-8048

Copyright 2025, cxsecurity.com

 

Back to Top