CVE-2024-8015
CVSS 3.1 Score 7.2 of 10 (high)
Details
Published Oct 9, 2024
Updated: Oct 15, 2024
CWE ID 470
Summary
CVE-2024-8015 is a newly discovered vulnerability affecting Telerik Report Server versions before Q3 2024 (10.2.24.924). This issue allows an attacker to execute arbitrary code remotely by injecting malicious objects through an insecure type resolution vulnerability. Successful exploitation could result in significant security risks, including unauthorized system access and data theft. It's crucial for organizations using Telerik Report Server to update to a patched version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Progress Publishers