Critical severity · published Aug 23, 2017
CVE-2017-11357
Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability
RansomwareIn wildKEV
9.8
CVSS
77.7%
EPSS
Yes
On KEV
Description
Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)77.7% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Jan 26, 2023
Federal remediation dueFeb 16, 2023
Ransomware campaign useKnown
Affected products
Which versions
TU
Telerik UI For Asp.net Ajax · Progress
before 2020.1.114 · source: NVD
UI
User Interface (UI) for ASP.NET AJAX · Telerik
All versions, or not specified · source: KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-11357
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-11357
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
exploit
https://www.exploit-db.com/exploits/43874/
x_refsource_CONFIRM
http://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/insecure-direct-object-reference
More from Telerik UI For Asp.net Ajax
9.8
CVE-2019-18935
Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability
9.8
CVE-2026-6023
Deserialization of Untrusted Data Vulnerability in Telerik UI for ASP.NET AJAX
9.8
CVE-2021-28141
An issue was discovered in Progress Telerik UI for ASP.NET AJAX 2021.1.224
9.8
CVE-2019-19790
Path traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to read and delete an image with extension .BMP, .EXIF, .GIF, .ICON, .JPEG, .PNG, .TIFF, or .WMF…
8.1
CVE-2026-13190
PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX