CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-08-23
Telerik UI for ASP.NET AJAX RadAsyncUpload Weak Encryption Remote Code Execution (RCE) - CVE-2017-11317
[Affected Scope] Progress Telerik UI for ASP.NET AJAX versions before R1 2017 and R2 before R2 2017 SP2
[Impact] Remote attackers can exploit weak encryption to perform unrestricted file uploads or execute arbitrary code on the target server
[Mitigation] Upgrade to the latest patched version of Telerik UI, or configure strong custom encryption keys in web.config