Unrated
Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability
Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution. CISA required action: Apply updates per vendor instructions.
Announced Group revision 1
Original source ↗CVE-2017-11357
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: kev:CVE-2017-11357
User Interface (UI) for ASP.NET AJAX
Source reference: /product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
- Related CVEs
- CVE-2017-11357
Source reference:
/cveID
Publisher severity
No explicit severity was provided.
- Event
- #1385 · Revision 1
- Added to Heist Feed
- Publisher date