Unrated severityNVD Advisory· Published Mar 20, 2024· Updated Dec 16, 2025

Progress Telerik Reporting Local Deserialization Vulnerability

CVE-2024-1801

Description

In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a local threat actor through an insecure deserialization vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Progress (organisation)/Telerik Reportingllm-fuzzy
Range: <18.0.24.130
Process Software/Telerik Reportingv5
Range: Q1 2007

Patches

Vulnerability mechanics

References

docs.telerik.com/reporting/knowledge-base/deserialization-vulnerability-cve-2024-1801-cve-2024-1856mitrevendor-advisory
www.telerik.com/products/reporting.aspxmitreproduct

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000