CVE-2017-11317

Description

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

91.984

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2017-11317 are affected in UI for ASP.NET AJAX 2016.3.1027	Windows
Vulnerabilities CVE-2017-11317,CVE-2017-9248 are affected in UI for ASP.NET AJAX 2017.2.503	Windows
Vulnerabilities CVE-2017-11317,CVE-2017-11357 are affected in UI for ASP.NET AJAX 2017.2.621	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234