CVE-2024-4357 — XML External Entity Processing Information Disclosure
An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, allows low-privilege attacker to read systems file vi…
Published: 2024-05-15 · CVSS: 6.5 · CVSS 3.1
An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, allows low-privilege attacker to read systems file via XML External Entity Processing.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7