high7.5
CVE-2024-7292
In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a credential stuffing attack is possible through improper restriction of excessive…
Impact
In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a credential stuffing attack is possible through improper restriction of excessive login attempts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Progress | Telerik Report Server | before 10.2.24.806 |