What’s Vulnerable › Vulnerabilities

CVE-2017-11357: Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2023-01-26
• EPSS: 77.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-08-23 · updated 2026-08-14
• Weakness: CWE-434

Description

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.

Affected products

• Progress Software Telerik UI for ASP.NET AJAX: before 2020.1.114 — fixed in 2020.1.114

How to fix

Upgrade to a fixed version: Progress Software Telerik UI for ASP.NET AJAX 2020.1.114. Check the vendor advisory for mitigations.

References

• http://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/insecure-direct-object-reference
• https://www.exploit-db.com/exploits/43874/
• http://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/insecure-direct-object-reference
• https://www.exploit-db.com/exploits/43874/
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-11357

Get alerted when CVE-2017-11357 or the next vulnerability affects your stack