CVE-2024-8048: Progress Telerik Reporting

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible using object injection via insecure expression evaluation.

Affected products

• Progress Telerik Reporting: before 18.2.24.924 (fixed in 18.2.24.924)

Published 2024-10-09. Last modified 2026-06-17.