Back to Database
Status published
Unknown
CVE-2017-11317
Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1...
Vulnerability Description
Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-11317
Credits & Attribution
No credits recorded in the NVD database.
References
- https://www.exploit-db.com/exploits/43874/
- http://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/unrestricted-file-upload
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0006
- http://packetstormsecurity.com/files/159653/Telerik-UI-ASP.NET-AJAX-RadAsyncUpload-Deserialization.html
More from telerik
View All →CVE-2020-13661
Telerik Fiddler through 5.0.20202.18177 allows attackers to execute arbitrary programs...
High
8.8
CVE-2020-11414
An issue was discovered in Progress Telerik UI for Silverlight...
High
7.5
CVE-2019-18935
Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a...
Unknown
0
CVE-2018-15122
An issue found in Progress Telerik JustAssembly through 2018.1.323.2 and...
High
7.8
CVE-2015-2264
Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32_vc100.dll and (2)...
Medium
6.9
Affected Vendor
telerik
View all reports →Affected Software
ui for asp.net ajax
Vulnerable Versions:
0, 2017.2.503, 2017.2.621
Timeline
Official Publish:
August 23rd, 2017
Last Modified:
October 21st, 2025
Added to House:
July 20th, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.