Description
Progress Telerik Report Server 是一种企业级报表管理和分发解决方案，提供生成和管理报告的功能。该漏洞存在于 Progress Telerik Report Server 2024 Q1 (10.0.24.305) 或更早版本中，攻击者可以通过认证绕过漏洞，未经授权访问受限功能，可能导致敏感数据泄露或系统被进一步利用。
Progress Telerik Report Server /Startup/Register 未授权访问漏洞（CVE-2024-4358）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-4358
https://www.telerik.com/report-server/documentation/knowledge-base/registration-auth-bypass-cve-2024-4358
https://github.com/sinsinology/CVE-2024-4358
https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358
https://www.venustech.com.cn/new_type/aqtg/20240605/27616.html
https://thehackernews.com/2024/06/telerik-report-server-flaw-could-let.html
https://www.exploit-db.com/exploits/52103
https://www.sentinelone.com/vulnerability-database/cve-2024-4358/
https://summoning.team/blog/progress-report-server-rce-cve-2024-4358-cve-2024-1800/