CVE

CVE-2017-11317

Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability

Telerik · User Interface (UI) for ASP.NET AJAX

Date added (CISA)

2022-04-11

Remediation due

2022-05-02

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX allows remote attackers to perform arbitrary file uploads or execute arbitrary code.