What’s Vulnerable › Vulnerabilities

CVE-2018-15122

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-08-16 · updated 2026-06-17
• Weakness: CWE-20

Description

An issue found in Progress Telerik JustAssembly through 2018.1.323.2 and JustDecompile through 2018.2.605.0 makes it possible to execute code by decompiling a compiled .NET object (such as DLL or EXE) with an embedded resource file by clicking on the resource.

Affected products

• Telerik Justassembly: from 2018.1.323.2
• Telerik Justdecompile: from 2018.2.605.0

References

• https://docs.telerik.com/devtools/justdecompile/knowledge-base/jd-ja-resources-vulnerability
• https://www.telerik.com/support/whats-new/justdecompile/release-history/justdecompile-r2-2018-sp1
• https://docs.telerik.com/devtools/justdecompile/knowledge-base/jd-ja-resources-vulnerability
• https://www.telerik.com/support/whats-new/justdecompile/release-history/justdecompile-r2-2018-sp1

Get alerted when CVE-2018-15122 or the next vulnerability affects your stack