Firetruck

CVE-2017-11357

KEV · Ransomware

Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability

View CVE record →
Vendor / Project
Telerik
Product
User Interface (UI) for ASP.NET AJAX
Date added
Jan 26, 2023
Due date
Feb 16, 2023
Known ransomware use
Known
CWEs
CWE-20

Description

Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution.

Required action

Apply updates per vendor instructions.

Notes