CVE-2024-6097

Summary

CVE-2024-6097 is a newly disclosed vulnerability affecting Telerik Reporting versions before Q1 2025 (19.0.25.211). This issue permits a local attacker to disclose information through an absolute path vulnerability. By exploiting this flaw, the adversary can gain unauthorized access to sensitive data, potentially leading to significant security risks for affected organizations. It is recommended that users upgrade to a patched version as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.