Researchers have released an exploit chain to achieve remote code execution on unpatched instances of Progress Telerik Report Server. Immediate patching is recommended.

CVE-2024-4358, CVE-2024-1800: Exploit Code Available for Critical Exploit Chain in Progress Telerik Report Server

In Progress® Telerik® Report Server versions prior to 2024 Q1 (10.0.24.130), a remote code execution attack is possible through an insecure deserialization vulnerability.

Proof of concept for exploit chain in Progress Telerik Report Server could lead to remote code execution. Patching strongly advised.

Progress Telerik Report Server version prior to 2024 Q1 (10.0.24.305) is vulnerable to authentication bypass and an insecure deserialization, allowing an unauthenticated attacker to execute code remotely via a specially forged request.

The version of Progress Telerik Report Server installed on the remote host is affected by an insecure deserialization vulnerability, as follows:

  - In Progress Telerik Report Server versions prior to 2024 Q1 (10.0.24.130), a remote code execution attack is     possible through an insecure deserialization vulnerability. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
114294	Progress Telerik Report Server Authentication Bypass	Web App Scanning	Component Vulnerability	Check Based	critical
200090	Progress Telerik Report Server Insecure Deserialization (CVE-2024-1800)	Nessus	CGI abuses	Combined	high

Detections

Analytics

CVE-2024-1800

high

Tenable Plugins

critical

high