CVE-2019-18935 Progress Telerik UI For ASP.NET AJAX
Progress Telerik UI for ASP.NET AJAX contains a deserialization of untrusted data vulnerability through RadAsyncUpload which leads to code execution on the server in the context of the w3wp.exe process.
- CVSS
- not scored
On CISA’s exploited list
Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability
- Added
- 2021-11-03
- Federal patch deadline
- 2022-05-03
- Ransomware use
- known