login
quiescence.eu
Skip to content

CVE-2017-11317

Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability

9.8
CVSS
84.2%
EPSS (exploit prob.)
99.7%
EPSS percentile
Yes
Actively exploited
No
Ransomware use
2022-04-11
Added
→ 0.0 pts
30-day EPSS trend

Summary

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX allows remote attackers to perform arbitrary file uploads or execute arbitrary code.

Affected software

Vendor: Telerik  ·  Product: User Interface (UI) for ASP.NET AJAX

Weakness types (CWE):

CWE-326

What to do

This vulnerability appears in CISA's Known Exploited Vulnerabilities catalog, meaning it is being exploited in the wild. Prioritize patching affected systems and verify exposure across your estate.

Related vulnerabilities in Telerik

CVENameEPSSExploited
CVE-2017-11357 Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability 77.7% Yes

Is your domain exposed?

Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.

Get your free report

Sources: CISA KEV catalog · NVD · FIRST EPSS

This product uses the NVD API but is not endorsed or certified by the NVD.

All information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.