HTTP DoS Vulnerability in Telerik Report Server by Progress Software
CVE-2024-7294

6.5MEDIUM

Key Information:

Vendor

Progress

Status
Telerik Reporting
Vendor
CVE Published:
9 October 2024

What is CVE-2024-7294?

A Denial of Service vulnerability exists in the Progress Telerik Report Server which permits an attacker to perform an HTTP DoS attack on anonymous endpoints. This flaw arises due to the absence of rate limiting, allowing malicious actors to exhaust server resources and disrupt service availability for legitimate users. This vulnerability poses significant risks, and users are advised to take preventive measures by updating to the latest version.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://docs.telerik.com/report-server/knowledge-base/unc...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.