Hi team support,
I was assigned to a project using telerik.reportviewer.webhtml Version=7.1.13.612. As of last week, someone reported a vulnerability bugs of bgColor parameter.
I've read some articles saying that it has to be upgraded to version 11.0.17.406 (2017 SP2) or later.
My question is, can I replace telerik.reportviewer.webhtml.dll file with the newest dll only?
And what about the dependencies? This is the current version of .NET & MS used.
Microsoft.AspNetCore.App 5.0.14 [C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App]
Microsoft.NETCore.App 3.1.22 [C:\Program Files\dotnet\shared\Microsoft.NETCore.App]
Microsoft.NETCore.App 5.0.14 [C:\Program Files\dotnet\shared\Microsoft.NETCore.App]
Microsoft.NETCore.App 6.0.2 [C:\Program Files\dotnet\shared\Microsoft.NETCore.App]
Microsoft.WindowsDesktop.App 3.1.22 [C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App]
Microsoft.WindowsDesktop.App 5.0.14 [C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App]
I have no support from the vendor built because the project was really old.
I'd appreciate any help. Thankyou.
1 Answer, 1 is accepted
Hi Riana,
Indeed, we fix the vulnerabilities in our products with the highest priority, as soon as we recognize them. We do this in a subsequent version. We don't release patches for existing versions of Telerik Reporting.
You need to upgrade to at least the specified version where the issue has been fixed.
Note that all the Telerik Reporting resources that interact should match in version. That said, it is not possible to replace only a specific DLL. You need to upgrade all the Reporting-related code in the application.
Regards,
Todor
Progress Telerik