Threats tagged 'ghsa-p23j-23m2-rg99'

A command injection vulnerability exists in Progress Telerik Reporting versions prior to 2024 Q3 (2024.3.924) due to improper neutralization of hyperlink elements. This flaw allows an attacker with local access to execute arbitrary commands, potentially leading to full system compromise. The vulnerability has a high severity score of 7.8 CVSS v3.1. No public exploits or patches are currently confirmed.