CVE-2014-2217: Path Traversal
Absolute path traversal vulnerability in the RadAsyncUpload control in the RadControls in Telerik UI for ASP.NET AJAX before Q3 2012 SP2 allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via a full pathname in the UploadID metadata value.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2217?
CVE-2014-2217 is classified as a high severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2014-2217?
To fix CVE-2014-2217, upgrade to Telerik UI for ASP.NET AJAX version Q3 2012 SP2 or later.
What types of attacks can be carried out using CVE-2014-2217?
CVE-2014-2217 allows attackers to write arbitrary files on the server, enabling potential execution of malicious code.
Which versions of Telerik UI for ASP.NET AJAX are affected by CVE-2014-2217?
CVE-2014-2217 affects Telerik UI for ASP.NET AJAX versions prior to Q3 2012 SP2.
Can CVE-2014-2217 be exploited remotely?
Yes, CVE-2014-2217 can be exploited remotely by attackers to execute arbitrary code on affected systems.