CyberSec.Space Logo
CVEブラウザに戻る

CVE-2024-4358

🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2024-05-29
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.

Affected Platforms (CPE)

📦
Telerik

Report Server 2024

<= 10.0.24.305

References & Advisories

🔗 https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358
🔗 https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-4358

関連する脆弱性情報

CVE-2025-15662

The Printcart Web to Print Product Designer for WooCommerce WordPress plugin before 2.5.3 does not restrict a user-supplied URL be...

CVE-2026-174592.1

A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.externalLocatio...

CVE-2026-174582.1

A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file src/browser...

CVE-2026-174572.1

A vulnerability has been found in mf-yang openclaw-cn up to 0.2.1. Affected by this issue is the function assertBrowserNavigationA...