High severity7.7NVD Advisory· Published Mar 20, 2024· Updated Jun 17, 2026

CVE-2024-1801

Description

In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a local threat actor through an insecure deserialization vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Process Software/Telerik Reportingv5
Range: Q1 2007
Progress (organisation)/Telerik Reportingllm-fuzzy2 versions
<2024 Q1 (18.0.24.130)+ 1 more
- (no CPE)range: <2024 Q1 (18.0.24.130)
- cpe:2.3:a:progress:telerik_reporting:*:*:*:*:*:*:*:*range: <18.0.24.130
Telerik/Reportingllm-fuzzy
Range: <2024 Q1 (18.0.24.130)

Patches

Vulnerability mechanics

References

docs.telerik.com/reporting/knowledge-base/deserialization-vulnerability-cve-2024-1801-cve-2024-1856nvdVendor Advisory
www.telerik.com/products/reporting.aspxnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.501
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000