CVE-2017-11317
Critical · 9.8 CISA KEVCVSS
9.8
EPSS
84.2%
Published
Aug 23, 2017
CISA due date
May 2, 2022
The record
Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-112026 A security vulnerability has been detected in light0011 cms… CWE-326
- CVE-2026-77405 RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. CWE-326
- CVE-2026-86670 A flaw has been found in aircheng-org iWebShop-5 up to 5.15. CWE-326
- CVE-2026-17520 The Newsletters WordPress plugin before 4.17 does not generate its API key using a… CWE-326
- CVE-2026-47842 Applications using AesBytesEncryptor with the two-argument constructor or when passing a… CWE-326
- CVE-2026-79084 Inadequate encryption strength in Notifications in Google Chrome on on Windows prior to… CWE-326
- CVE-2026-74889 openssl_encrypt versions before 1.4.0 use HKDF with no salt and static info parameter in… CWE-326
- CVE-2026-65777 Inadequate encryption strength in Windows Active Directory allows an authorized attacker… CWE-326