CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-07-03
Telerik UI for ASP.NET AJAX Cryptographic Weakness Vulnerability Analysis and Mitigation Guide (CVE-2017-9248)
[Affected Scope] Progress Telerik UI for ASP.NET AJAX versions prior to R2 2017 SP1, and Sitefinity versions prior to 10.0.6412.0
[Impact] Attackers can compromise cryptographic protections to leak the MachineKey, perform arbitrary file uploads/downloads, execute XSS, or compromise ASP.NET ViewState to achieve Remote Code Execution (RCE)
[Mitigation] Upgrade to the latest secure version or manually configure a strong, unique DialogParametersEncryptionKey and MachineKey in web.config