Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability

概要

参考情報

• telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/insecure-direct-object-reference · Mitigation
• exploit-db.com/exploits/43874 · Exploit
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2017-11357

telerik ui for asp.net ajax のその他の脆弱性

• CVE-2026-14932中 6.5In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's ChartImage.axd handler is vulnerable to unauthenti…
• CVE-2026-14865中 5.3In Progress® Telerik® UI for AJAX prior to v2026.2.708, the internal LayoutBuilder control processes client-state XML without disabling DTD …
• CVE-2026-13192中 6.5In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of content submitted to the RadEditor PDF export feature may…
• CVE-2026-13190高 8.1In Progress® Telerik® UI for AJAX prior to v2026.2.708, a deserialization vulnerability in the persistence utilities allows unsafe type inst…
• CVE-2026-13189高 7.5In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of the language parameter in the spell check handler may all…