CVE-2017-11357

Severity

critical · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2023-01-26

Reference

https://nvd.nist.gov/vuln/detail/CVE-2017-11357

⚡ RCE ⌖ exploited in the wild shame 95/100 ransomwarerceexploited-in-wild

Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution.

Players implicated

Telerik · vendor User Interface (UI) for ASP.NET AJAX · product

Description

Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.