CVE-2017-11357: Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability
Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.
Other sources
Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution.
— CISA
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-11357?
CVE-2017-11357 is considered a critical vulnerability due to its potential for arbitrary file uploads and code execution.
How do I fix CVE-2017-11357?
To fix CVE-2017-11357, users should upgrade to Telerik UI for ASP.NET AJAX versions later than R2 2017 SP2.
What kind of attacks can CVE-2017-11357 enable?
CVE-2017-11357 can enable remote attackers to perform arbitrary file uploads and execute arbitrary code on the server.
Which versions of Telerik UI for ASP.NET AJAX are affected by CVE-2017-11357?
CVE-2017-11357 affects Telerik UI for ASP.NET AJAX versions prior to R2 2017 SP2, including all versions up to 2017.2.621.
Is authentication necessary for exploiting CVE-2017-11357?
No, CVE-2017-11357 can be exploited by an unauthenticated attacker, making it particularly dangerous.