Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability

Mô tả

Tham khảo

• telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/insecure-direct-object-reference · Mitigation
• exploit-db.com/exploits/43874 · Exploit
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2017-11357

Lỗ hổng khác của telerik ui for asp.net ajax

• CVE-2026-14932TRUNG BÌNH 6.5In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's ChartImage.axd handler is vulnerable to unauthenti…
• CVE-2026-14865TRUNG BÌNH 5.3In Progress® Telerik® UI for AJAX prior to v2026.2.708, the internal LayoutBuilder control processes client-state XML without disabling DTD …
• CVE-2026-13192TRUNG BÌNH 6.5In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of content submitted to the RadEditor PDF export feature may…
• CVE-2026-13190CAO 8.1In Progress® Telerik® UI for AJAX prior to v2026.2.708, a deserialization vulnerability in the persistence utilities allows unsafe type inst…
• CVE-2026-13189CAO 7.5In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of the language parameter in the spell check handler may all…