CVE-2024-6096: Unsafe Deserialization Vulnerability
In Progress® Telerik® Reporting versions prior to 18.1.24.709, a code execution attack is possible through object injection via an insecure type resolution vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Progress Telerik Reportingto a version that resolves this vulnerability.Fixed in 18.1.24.709
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6096?
CVE-2024-6096 is classified as a critical vulnerability due to its potential for code execution attacks.
How do I fix CVE-2024-6096?
To remediate CVE-2024-6096, update Progress Telerik Reporting to version 18.1.24.709 or later.
What versions are affected by CVE-2024-6096?
CVE-2024-6096 affects all versions of Progress Telerik Reporting prior to 18.1.24.709.
What type of attack is associated with CVE-2024-6096?
CVE-2024-6096 is associated with a code execution attack enabled by an insecure type resolution vulnerability.
How can I verify if my software is vulnerable to CVE-2024-6096?
You can verify your software's vulnerability to CVE-2024-6096 by checking if it is running a version earlier than 18.1.24.709.