CVE-2020-11414 - CVE House
Back to Database
Status published High CVE-2020-11414

An issue was discovered in Progress Telerik UI for Silverlight...

Vulnerability Description

An issue was discovered in Progress Telerik UI for Silverlight before 2020.1.330. The RadUploadHandler class in RadUpload for Silverlight expects a web request that provides the file location of the uploading file along with a few other parameters. The uploading file location should be inside the directory where the upload handler class is defined. Before 2020.1.330, a crafted web request could result in uploads to arbitrary locations.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-11414

Credits & Attribution

No credits recorded in the NVD database.

References

More from telerik

View All →
CVE-2020-13661
Telerik Fiddler through 5.0.20202.18177 allows attackers to execute arbitrary programs...
High 8.8
CVE-2019-18935
Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a...
Unknown 0
CVE-2018-15122
An issue found in Progress Telerik JustAssembly through 2018.1.323.2 and...
High 7.8
CVE-2017-11317
Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1...
Unknown 0
CVE-2015-2264
Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32_vc100.dll and (2)...
Medium 6.9

Affected Vendor

Affected Software

ui for silverlight
Vulnerable Versions:
0

Timeline

Official Publish: March 31st, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.