cyfenced.com →

[ CVE-2017-11357 · Published 23 Aug 2017 ]

Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability

Exploited · CISA KEV CVSS 9.8 EPSS 78%No fix listed yet

[ Why it matters ]Priority signals

  • Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2023-01-26
  • Known to be used in ransomware campaigns
  • EPSS: 78% chance of exploitation in the next 30 days (higher than 100% of CVEs)
  • Critical severity: CVSS 9.8

[ Description ]Official description

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.

CISA: Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 16 Feb 2023): Apply updates per vendor instructions.

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References