Vulnerabilities > CVE-2024-7294 - Unspecified vulnerability in Progress Telerik Reporting

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

progress

NVD

Published: 2024-10-09

Updated: 2024-10-15

Summary

In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), an HTTP DoS attack is possible on anonymous endpoints without rate limiting.

Vulnerable Configurations

Part	Description	Count
Application	Progress Progress Telerik Reporting - Progress Telerik Reporting 8.2.14.1027 Progress Telerik Reporting 8.2.14.1204 Progress Telerik Reporting 9.0.15.225 Progress Telerik Reporting 9.0.15.324 Progress Telerik Reporting 9.1.15.624 Progress Telerik Reporting 9.1.15.731 Progress Telerik Reporting 9.2.15.930 Progress Telerik Reporting 9.2.15.1126 Progress Telerik Reporting 10.0.16.113 Progress Telerik Reporting 10.0.16.204 Progress Telerik Reporting 10.2.16.1025	12

References

https://docs.telerik.com/report-server/knowledge-base/uncontrolled-resource-consumption-cve-2024-7294