CVE-2017-11357

CRITICAL · 9.5 CVSS Gepubliceerd: 26-01-2023 CWE-20

Beschrijving

Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution.

Required action: Apply updates per vendor instructions.

Vendors

Telerik

Affected products

User Interface (ui) For Asp.net Ajax

References

docs.telerik.com
nvd.nist.gov