Threats tagged 'ghsa-fxcw-5g46-3pjv'

In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924) are vulnerable to a code execution attack via object injection through insecure expression evaluation. This vulnerability allows an attacker with local access to execute arbitrary code, potentially leading to full compromise of the affected system. The flaw is identified as CWE-470 and has a high severity rating with a CVSS score of 7.8.