CVE-2024-7840

Publication date

2024-10-09 14:41:40

Family

ProgressSoftware

State

PUBLISHED

Description

In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a command injection attack is possible through improper neutralization of hyperlink elements.