Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	KEVEPSS 77%	CVE-2017-11357User Interface (UI) for ASP.NET AJAX · Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability Critical9.8KEVEPSS 77%2023-01-26CISA KEVCVE-2017-11357 CVE-2017-11357 is an insecure direct object reference vulnerability in Telerik UI for ASP.NET AJAX's RadAsyncUpload component. This flaw can allow attackers to upload files to restricted locations, potentially leading to remote code execution. The vulnerability has been exploited in the wild and is associated with known ransomware campaigns. KEVEPSS 77%Vulnerability Telerik #exploited-in-the-wild	CISA KEV	2023-01-26
Critical	9.8	KEVEPSS 84%	CVE-2017-11317User Interface (UI) for ASP.NET AJAX · Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability Critical9.8KEVEPSS 84%2022-04-11CISA KEVCVE-2017-11317 CVE-2017-11317 is a vulnerability in Progress Telerik UI for ASP.NET AJAX that allows remote attackers to upload arbitrary files or execute arbitrary code on the affected system. This vulnerability has been exploited in the wild. The affected product is not a cloud service, and no specific affected versions are provided in the available data. KEVEPSS 84%Vulnerability Telerik #exploited-in-the-wild	CISA KEV	2022-04-11

Showing 1–2 of 2 results