Medium severity5.3NVD Advisory· Published Feb 12, 2025· Updated Jun 17, 2026

CVE-2024-6097

Description

In Progress® Telerik® Reporting versions prior to 2025 Q1 (19.0.25.211), information disclosure is possible by a local threat actor through an absolute path vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Progress (organisation)/Telerik Reporting2 versions
cpe:2.3:a:progress:telerik_reporting:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:progress:telerik_reporting:*:*:*:*:*:*:*:*range: <19.0.25.211
- (no CPE)range: 1.0.0
Telerik/Reportingllm-fuzzy
Range: <2025 Q1 (19.0.25.211)

Patches

Vulnerability mechanics

References

docs.telerik.com/reporting/knowledge-base/kb-security-absolute-path-traversal-CVE-2024-6097nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000