CVE-2017-11357
CISA 기관 조치 기한: 2023-02-16
Telerik User Interface (UI) for ASP.NET AJAX
Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution.
KEV 필수 조치: Apply updates per vendor instructions.
공개 익스플로잇 / PoC
- Exploit-DB: EDB-43874 ↗