writeups.xyz / Molding Lies Into Reality || Exploiting CVE-2024-4358

Submitter : c2a

Date: 3 June 2024

Bounty : undisclosed

Vulnerabilities :

• RCE
• Insecure Deserialization
• Authentication Bypass
• Security Code Review

Programs :

• Progress (Telerik)

Authors :

• Sina Kheirkhah (@SinSinology)

Link :
https://summoning.team/blog/progress-report-server-rce-cve-2024-4358-cve-2024-1800/