← Back to browse · API

CVE-2024-4358

Severity
CRITICAL
CVSS
9.8
EPSS
0.97482
Risk score
59.12
CISA KEV
Yes
PoC
No
Published
2024-05-29
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2024-43994
Products
Progress Software Corporation:Telerik Report Server 1.0.0 <10.1.24.514, Progress:Telerik Report Server
Sources
cisa.gov CVE-2024-4358
euvd EUVD-2024-43994

Description

In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.

References