Summary

In this post, we will analyze the Progress Telerik Report Server Authentication Bypass to RCE exploit (CVE-2024-4358) and understand how it works to pwn the vulnerable targets for fun and profit!

Script link

CVE-2024-4358/CVE-2024-4358.py at main · sinsinology/CVE-2024-4358

Progress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800) - sinsinology/CVE-2024-4358

Description