HTTP DoS Vulnerability in Telerik Report Server by Progress Software
CVE-2024-7294

6.5MEDIUM

Key Information:

Vendor

Progress

Status
Telerik Reporting
Vendor
CVE Published:
9 October 2024

What is CVE-2024-7294?

A Denial of Service vulnerability exists in the Progress Telerik Report Server which permits an attacker to perform an HTTP DoS attack on anonymous endpoints. This flaw arises due to the absence of rate limiting, allowing malicious actors to exhaust server resources and disrupt service availability for legitimate users. This vulnerability poses significant risks, and users are advised to take preventive measures by updating to the latest version.

References

https://docs.telerik.com/report-server/knowledge-base/unc...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.