Vulners
Lucene search
CVE-2024-4358
🗓️ 29 May 2024 14:51:21Reported by ProgressSoftwareType 
cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 257 Views🌐 WEB
10
Node
[
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "Telerik Report Server",
"vendor": "Progress Software Corporation",
"versions": [
{
"lessThan": "10.1.24.514",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| reportName | request body | /api/reportserver/report | Upload of a crafted .trdp payload to trigger insecure deserialization and remote code execution during report processing | CWE-290 |
| categoryName | request body | /api/reportserver/report | Upload of a crafted .trdp payload to trigger insecure deserialization and remote code execution during report processing | CWE-290 |
| description | request body | /api/reportserver/report | Upload of a crafted .trdp payload to trigger insecure deserialization and remote code execution during report processing | CWE-290 |
| reportContent | request body | /api/reportserver/report | Upload of a crafted .trdp payload to trigger insecure deserialization and remote code execution during report processing | CWE-290 |
| extension | request body | /api/reportserver/report | Upload of a crafted .trdp payload to trigger insecure deserialization and remote code execution during report processing | CWE-290 |
| timeStamp | request body | /api/reports/clients | Create a report client entry as part of the exploitation flow to obtain a clientId for subsequent steps | CWE-290 |
| report | request body | /api/reports/clients/{clientId}/parameters | Set report parameters for the created report to complete the deserialization exploit chain | CWE-290 |
| parameterValues | request body | /api/reports/clients/{clientId}/parameters | Set report parameters for the created report to complete the deserialization exploit chain | CWE-290 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
31 Oct 2025 21:57Current
9.9High risk
Vulners AI Score9.9
CVSS 3.19.8
EPSS0.94344
SSVC