Exploit for Authentication Bypass by Spoofing in Telerik Report_Server_2024

🗓️ 03 Jun 2024 08:22:10Reported by sinsinologyType

Telerik Report Server deserialization and authentication bypass exploit chain for CVE-2024-4358/CVE-2024-1800. Mitigate by updating to the latest version or following the Progress Advisor

Reporter	Title	Published	Views	Family All 46
GithubExploit	Exploit for Authentication Bypass by Spoofing in Telerik Report_Server_2024	4 Jun 202411:32	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Spoofing in Telerik Report_Server_2024	4 Jun 202416:07	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Spoofing in Telerik Report_Server_2024	5 Jun 202401:05	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Spoofing in Telerik Report_Server_2024	24 Aug 202410:09	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Spoofing in Telerik Report_Server_2024	9 Jun 202406:30	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Spoofing in Telerik Report_Server_2024	24 Aug 202410:09	–	githubexploit
0day.today	Telerik Report Server Authentication Bypass / Remote Code Execution Exploit	13 Jun 202400:00	–	zdt
ATTACKERKB	CVE-2024-4358	29 May 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of the Telerik Report Server’s reporting control software lies in its deserialization mechanism flaws, which allow attackers to execute arbitrary code.	22 Mar 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Register method in the Telerik Report Server reporting framework allows a malicious actor to access limited functions.	7 Jun 202400:00	–	bdu_fstec

22 Aug 2025 14:30Current

10High risk

Vulners AI Score10

CVSS 3.19.8 - 9.9

EPSS0.97482

SSVC