Lucene search
K

5 matches found

OSV
OSV
added 2024/05/15 5:15 p.m.2 views

CVE-2024-4357

An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 10.0.24.305 or earlier, allows low-privilege attacker to read systems file via XML External Entity Processing...

6.5CVSS5.8AI score0.007EPSS
Exploits0References1
NVD
NVD
added 2024/05/15 5:15 p.m.34 views

CVE-2024-4357

An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 10.0.24.305 or earlier, allows low-privilege attacker to read systems file via XML External Entity Processing...

6.5CVSS6.1AI score0.007EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/15 4:58 p.m.35 views

CVE-2024-4357 XML External Entity Processing Information Disclosure

An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 10.0.24.305 or earlier, allows low-privilege attacker to read systems file via XML External Entity Processing...

6.5CVSS6.3AI score0.007EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/15 4:58 p.m.14 views

CVE-2024-4357 XML External Entity Processing Information Disclosure

An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 10.0.24.305 or earlier, allows low-privilege attacker to read systems file via XML External Entity Processing...

6.5CVSS6.4AI score0.007EPSS
Exploits0References1
CVE
CVE
added 2024/05/15 4:58 p.m.29 views

CVE-2024-4357

Progress Telerik Report Server (versions 10.0.24.305 and earlier, i.e., 2024 Q1) suffers an XML External Entity Processing (XXE) information-disclosure vulnerability in the ValidateMetadaUri path. A low-privilege attacker could read system files; an authenticated context is required but may be by...

6.5CVSS6.1AI score0.007EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder