CVE-2024-11343: falha de alta gravidade em Progress Software Telerik Document Processing…
Telerik Document Processing Path Traversal
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.3epss 0.7%
In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 (2025.1.205), unzipping an archive can lead to arbitrary file system access.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Produtos afetados
Progress Software · Telerik Document Processing LibrariesCVEs relacionadas — Progress Software Telerik Document Processing…
No mesmo produto, das mais perigosas para as menos.
CVE-2024-8049MEDIUMTelerik Document Processing Improper Handling of Memory ResourcesEPSS 0.4%CVE-2026-118036HIGHUncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question AnsweringEPSS 0.4%CVE-2026-118035HIGHUncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessingEPSS 0.3%CVE-2026-118037HIGHUncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessingEPSS 0.3%CVE-2026-118039HIGHXML External Entity Reference in Telerik Document Processing Libraries SVG Image ProcessingEPSS 0.3%CVE-2026-118038HIGHPath Traversal in Telerik Document Processing Libraries AI Agent ToolsEPSS 0.3%