# CVE-2017-11357

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.

- Page: https://www.vulneraibility.com/cve/CVE-2017-11357
- CVSS: 9.8
- Known exploited: yes, in CISA KEV since 2023-01-26; CISA due date 2023-02-16; known ransomware use
- EPSS: 77.68% (percentile 99.6)
- Public exploit code: 1 on Exploit-DB (first 2018-01-24)
- CISA SSVC: exploitation active, automatable yes, technical impact total (assessed 2021-01-22)
- Weakness: CWE-434
- Published: 2017-08-23

## Affected

- progress:telerik_ui_for_asp.net_ajax

## References

- [exploit] https://www.exploit-db.com/exploits/43874/
- [other] http://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/insecure-direct-object-reference
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-11357

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.