Report Server 2024

DATE	CVE	VULNERABILITY TITLE	RISK
2024-05-29	CVE-2024-4358	Authentication Bypass by Spoofing vulnerability in Telerik Report Server 2024 In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability. network low complexity telerik CWE-290 critical	9.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.