Telerik 2

Organization

CVE-2017-11357: Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Jan 26, 2023

Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution.

Vulnerabilities & Patching

CVE-2017-11317: Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Apr 11, 2022

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX allows remote attackers to perform arbitrary file uploads or execute arbitrary code.

Vulnerabilities & Patching