CVE-2017-11357 Telerik User Interface (UI) For ASP.NET AJAX
Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution.
- CVSS
- not scored
On CISA’s exploited list
Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability
- Added
- 2023-01-26
- Federal patch deadline
- 2023-02-16
- Ransomware use
- known