ZDI-24-518: Progress Software Telerik Reporting ValidateMetadaUri XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Progress Software Telerik Reporting. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2024-4357.

attackers authentication can cve cve-2024 cves cvss disclosure exploit external information information disclosure information disclosure vulnerability mechanism progress progress software rating reporting sensitive sensitive information software telerik vulnerability xml zdi