Request for TelerikReportServer_10.0.24.130.exe Download

[白]

Hello Telerik Support,

I am a cybersecurity beginner working on reproducing an exploit chain for CVE‑2024‑4358 and CVE‑2024‑1800 against Progress Telerik Report Server. I need the exact TelerikReportServer_10.0.24.130.exe installer for my testing environment. Could you please provide a link or instructions to access this specific version?

Thank you for your assistance.

Best regards,
Bailu

[Lance | Senior Manager Technical Support]

Hello 白 / Bailu,

Thank you for reaching out. We are unable to meet your request at this time. Moreso, we cannot provide you with an active exploit, as these items have already been discovered, reported, and disclosed.

To learn more about those two disclosures, visit:

• https://www.cve.org/CVERecord?id=CVE-2024-4358 
• https://www.cve.org/CVERecord?id=CVE-2024-1800 

If you do identify anything that has not been already disclosed, please submit it via BugCrowd so that we can triage it ands properly recognize you for your efforts. We maintain an active and robust VDP hub, which contains a program for every Progress Software product.

1. Go to Progress Software - Engagements.
2. Select the relevant product, e.g. DevTools https://bugcrowd.com/engagements/devtools-vdp 
3. Click "Submit Report" and fill out the form (including evidence and steps to reproduce)

I wish you luck in your continued efforts and growth as a security researcher.

Regards,
Lance | Senior Manager Technical Support
Progress Telerik

[白]

Hi Lance,

Thank you for your clear guidance and the links to the CVE details. I appreciate your support and will submit any new findings through the BugCrowd VDP as suggested.

Wish you have a nice day!

Best regards,
Bailu