In Progress® Telerik® Reporting prior to version 20.3.26.1110, a deserialization of untrusted data vulnerability in the .NET Framework report…
In Progress® Telerik® Reporting prior to version 20.3.26.1110, a deserialization of untrusted data vulnerability in the .NET Framework report designers allows a local attacker with low privileges to execute arbitrary code in the context of the designer process when the user performs certain editing operations.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Progress Software
- Product
- Telerik Reporting
- CVSS v3.1
- 7.3 AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- Weakness
- CWE-502
- Exposure class
- Developer platform, File transfer
- NVD status
- Received
Why it ranks 43 (Notable)
- CVSS v3.1 7.3 high
- Exposed product class: file transfer
- Widely deployed vendor product (Progress Software)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.