CVE-2017-11357criticalunder attackransomwareCWE-434

CVE-2017-11357

Published · Updated

Follow this CVE+ Monitor User Interface for ASP.NET AJAX

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 9.8epss 78%
from disclosure to weapon139 days
Published on NVDAug 23
1st PoC+139d
CISA KEV+1982d
Action required by CISAfederal deadline: 2023-02-16

Apply updates per vendor instructions.

In short

A file upload feature in Progress Telerik UI for ASP.NET AJAX doesn't properly validate user input, allowing attackers to upload malicious files or run arbitrary code on the server.

Technical detail

CVE-2017-11357 affects RadAsyncUpload in Progress Telerik UI for ASP.NET AJAX versions before R2 2017 SP2. The vulnerability stems from insufficient input validation on file uploads (CWE-434), enabling remote attackers to bypass file type restrictions and upload executable files or scripts that execute with application privileges. No authentication is required; exploitation can lead to complete server compromise.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.