CVE-2024-1800: Progress Telerik Report Server Deserialization
In Progress® Telerik® Report Server versions prior to 2024 Q1 (10.0.24.130), a remote code execution attack is possible through an insecure deserialization vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Progress Telerik Report Serverto a version that resolves this vulnerability.Fixed in 10.0.24.130
Event History
Frequently Asked Questions
What is the severity of CVE-2024-1800?
CVE-2024-1800 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2024-1800?
To fix CVE-2024-1800, upgrade your Progress Telerik Report Server to version 10.0.24.130 or later.
What impact does CVE-2024-1800 have on affected systems?
CVE-2024-1800 can allow unauthorized users to execute arbitrary code on vulnerable systems.
Which versions of Telerik Report Server are affected by CVE-2024-1800?
CVE-2024-1800 affects all versions of Progress Telerik Report Server prior to 2024 Q1 (10.0.24.130).
Is there a workaround for CVE-2024-1800 until a fix is applied?
There are no reliable workarounds for CVE-2024-1800; the recommended solution is to upgrade to the patched version.