Telerik security briefs
1 published alerts for Telerik products and services.
Actively exploited (KEV)Ransomware
Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability
Telerik User Interface (UI) for ASP.NET AJAX is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2017-11357). Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution. CISA remediation due date: 2023-02-16. If you need help checking exposure, call (864) 335-9223.