Skip to main content

User Interface (UI) for ASP.NET AJAX vulnerabilities

1 published alerts for Telerik User Interface (UI) for ASP.NET AJAX.

Actively exploited (KEV)Ransomware

CVE-2017-11357

Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability

Telerik User Interface (UI) for ASP.NET AJAX is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2017-11357). Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution. CISA remediation due date: 2023-02-16. If you need help checking exposure, call (864) 335-9223.