Progress Telerik Reporting Absolute Path Vulnerability Allowing Information Disclosure

A vulnerability allowing information disclosure through absolute path traversal has been identified in Progress Telerik Reporting versions prior to 2025 Q1 (19.0.25.211). This issue affects the Windows desktop standalone Report Designer and can be exploited by a local threat actor.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure.

Remediation

Users are advised to upgrade to Progress Telerik Reporting 2025 Q1 (19.0.25.211). For those with a Telerik Reporting license, the update is available through the Telerik Product Downloads page. Instructions for updating can be found in the Telerik Reporting Upgrade Overview.