CVEvulnerability

CVE-2024-8048

7.8 HIGH Published 2024-10-09 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2024-10-09
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses: CWE-470

Description

In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible using object injection via insecure expression evaluation.

Affected configurations

• progress telerik reporting (< 18.2.24.924)

Weakness · CWE (1)

CWE-470 Use of Externally-Controlled Input to Select Classes or Code weakness

References

https://docs.telerik.com/reporting/knowledge-base/insecure-expression-evaluation-cve-2024-8048 Vendor Advisory
https://security.netapp.com/advisory/ntap-20250425-0004/ security.netapp.com

CVE-2024-8048

Description

Affected configurations

Related

Weakness · CWE (1)

References