Telerik · User Interface (UI) for ASP.NET AJAX
CVE-2017-11317
Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability
What it is
Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.
CISA: Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX allows remote attackers to perform arbitrary file uploads or execute arbitrary code.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: May 2, 2022
- Added to the CISA list
- April 11, 2022
- Published
- August 23, 2017
- Severity
- Critical 9.8 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 84% in the top 0.3% of all known vulnerabilities
- Weakness
- CWE-326
- More details
- NVD · CVE.org · CISA
All references (4)
- https://www.exploit-db.com/exploits/43874/
- http://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/unrestricted-file-upload
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0006
- http://packetstormsecurity.com/files/159653/Telerik-UI-ASP.NET-AJAX-RadAsyncUpload-Deserialization.html
More exploited flaws from Telerik
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Jan 26, 2023 | UI for ASP.NET AJAX Insecure Direct Object Reference | User Interface (UI) for ASP.NET AJAX | Critical 9.8 | 78% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.