CVE-2017-11357 - Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code

Back Back to CVE browser

CRITICAL KEV

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code

Published Aug 23, 2017 ·Due Feb 16, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 77.68%

Description

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

References (4)

http://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/insecure-direct-object-reference
x_refsource_CONFIRMMitigationVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-2986
Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-11357
government-resourceUS Government Resource
https://www.exploit-db.com/exploits/43874/
exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/insecure-direct-object-reference		x_refsource_CONFIRMMitigationVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-2986		Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-11357		government-resourceUS Government Resource
https://www.exploit-db.com/exploits/43874/		exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry