CVE-2024-4837

5.3 mediumEPSS 0.4%

Medium (5.3) in progress telerik report server. EPSS 0.4% chance of exploitation in the next 30 days.

In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via a trust boundary violation vulnerability.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2024-05-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

progress:telerik_report_server

References

https://docs.telerik.com/report-server/knowledge-base/information-exposure-cve-2024-4837
https://docs.telerik.com/report-server/knowledge-base/information-exposure-cve-2024-4837

Check your stack JSON