Skip to main content

Telerik Reporting CVE-2024-8014

HIGH
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') (CWE-470)
2024-10-09 security@progress.com
RCE Telerik Reporting
8.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
8.8 HIGH
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Oct 09, 2024 - 15:15 nvd
HIGH 8.8

DescriptionNVD

In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible through object injection via an insecure type resolution vulnerability.

AnalysisAI

In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible through object injection via an insecure type resolution vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-470. In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible through object injection via an insecure type resolution vulnerability. Affected products include: Progress Telerik Reporting. Version information: prior to 2024.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Telerik Reporting

View all
CVE-2017-9140 MEDIUM POC
6.1 May 22

Cross-site scripting (XSS) vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms

CVE-2024-6096 CRITICAL
9.8 Jul 24

In Progress® Telerik® Reporting versions prior to 18.1.24.709, a code execution attack is possible through object inject
CVE-2024-7293 HIGH
8.8 Oct 09

In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a password brute forcing attack is possible
CVE-2024-1856 HIGH
8.8 Mar 20

In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a remote
CVE-2024-4202 HIGH
8.6 May 15

In Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.514), a code execution attack is possible through an

CVE-2024-8048 HIGH
7.8 Oct 09

In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible using object

CVE-2024-7840 HIGH
7.8 Oct 09

In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a command injection attack is possible through im
CVE-2024-4200 HIGH
7.8 May 15

In Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.2.514), a code execution attack is possible by a loca
CVE-2024-1801 HIGH
7.8 Mar 20

In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a local

CVE-2024-0832 HIGH
7.8 Jan 31

In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applicati
CVE-2024-7294 MEDIUM
6.5 Oct 09

In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), an HTTP DoS attack is possible on anonymous
CVE-2024-4357 MEDIUM
6.5 May 15

An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earli

Same weakness CWE-470 – Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

View all
CVE-2024-0200 CRITICAL POC
9.8
CVE-2024-4990 CRITICAL POC
9.1
CVE-2024-28121 HIGH POC
8.8
CVE-2023-33652 HIGH POC
8.8
CVE-2026-58659 HIGH POC
8.4
CVE-2022-30287 HIGH POC
8.0
CVE-2025-68455 HIGH POC
7.2
CVE-2026-25498 HIGH POC
7.2

Same technique RCE

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2016-4117 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2025-53770 CRITICAL POC
9.8
CVE-2020-7961 CRITICAL POC
9.8

Share

CVE-2024-8014 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy