CVE-2017-11317

KEV

Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability

View CVE record →

Vendor / Project: Telerik
Product: User Interface (UI) for ASP.NET AJAX
Date added: Apr 11, 2022
Due date: May 2, 2022
Known ransomware use: Unknown
CWEs: CWE-326

Description

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX allows remote attackers to perform arbitrary file uploads or execute arbitrary code.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2017-11317