Telerik UI for ASP.NET AJAX CVE-2017-11357 Arbitrary File Upload Vulnerability
BID:103173
Info
Telerik UI for ASP.NET AJAX CVE-2017-11357 Arbitrary File Upload Vulnerability
| Bugtraq ID: | 103173 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-11357 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 22 2017 12:00AM |
| Updated: | Aug 22 2017 12:00AM |
| Credit: | Paul Taylor and Foregenix Ltd. |
| Vulnerable: |
Telerik Ui For Asp.Net Ajax 2017.2.621 Telerik Ui For Asp.Net Ajax 2017.2.503 Telerik Ui For Asp.Net Ajax 2014.3.1209 |
| Not Vulnerable: |
Telerik Ui For Asp.Net Ajax 2017.2.711 |
Discussion
Telerik UI for ASP.NET AJAX CVE-2017-11357 Arbitrary File Upload Vulnerability
Telerik UI for ASP.NET AJAX is prone to an arbitrary file-upload vulnerability.
An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application or privilege escalation.
Versions prior to Telerik UI for ASP.NET AJAX 2017.2.711 are vulnerable.
Telerik UI for ASP.NET AJAX is prone to an arbitrary file-upload vulnerability.
An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application or privilege escalation.
Versions prior to Telerik UI for ASP.NET AJAX 2017.2.711 are vulnerable.
Exploit / POC
Telerik UI for ASP.NET AJAX CVE-2017-11357 Arbitrary File Upload Vulnerability
The researcher who discovered this issue has created a exploit. Please see the references for more information.
The researcher who discovered this issue has created a exploit. Please see the references for more information.