CVE-2017-11357: Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability

EPSS trend

Probability

77.68%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 77.68% on 20-09-2026

20-09-202620-10-2026

EPSS score

77.68%

Known exploited

Compare KEV catalogs

CISA KEVListed

Added: 26-01-2023
Federal due date: 16-02-2023

CISA required action

Apply updates per vendor instructions. docs.telerik.com/devtools/aspnet-ajax/knowledge-base/asyncupload-insecure-direct-object-reference nvd.nist.gov/vuln/detail/CVE-2017-11357

Public exploits

1 found

exploit-databaseaspxUnverified
Telerik UI for ASP.NET AJAX 2012.3.1308 < 2017.1.118 - Arbitrary File Upload
Maturity: poc

References

3 links

www.exploit-db.com/exploits/43874/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/insecure-direct-object-referenceX Refsource CONFIRMMitigationVendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-11357Government ResourceUS Government Resource

Related vulnerabilities

CVE-2021-28141progresstelerik_ui_for_asp.net_ajax2.32%5y ago11-03-2021 16:25An issue was discovered in Progress Telerik UI for ASP.NET AJAX 2021.1.224. It allows unauthorized access to MicrosoftAjax.js through the Telerik.Web.UI.WebResource.axd file. This may allow the attacker to gain unauthorized access to the server and execute code. To exploit, one must use the parameter _TSM_HiddenField_ and inject a command at the end of the URI. NOTE: the vendor states that this is not a vulnerability. The request's output does not indicate that a "true" command was executed on the server, and the request's output does not leak any private source code or data from the server CVE-2025-3600progress softwaretelerik ui for asp.net ajax+125.09%1y ago14-05-2025 13:21In Progress® Telerik® UI for AJAX, versions 2011.2.712 to 2025.1.218, an unsafe reflection vulnerability exists that may lead to an unhandled exception resulting in a crash of the hosting process and denial of service.CVE-2014-2217progresstelerik_ui_for_asp.net_ajax4.19%11y ago25-12-2014 21:00Absolute path traversal vulnerability in the RadAsyncUpload control in the RadControls in Telerik UI for ASP.NET AJAX before Q3 2012 SP2 allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via a full pathname in the UploadID metadata value.CVE-2019-19790progresstelerik_ui_for_asp.net_ajax2.99%6y ago13-12-2019 17:06Path traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to read and delete an image with extension .BMP, .EXIF, .GIF, .ICON, .JPEG, .PNG, .TIFF, or .WMF on the server through a specially crafted request. NOTE: RadChart was discontinued in 2014 in favor of RadHtmlChart. All RadChart versions were affected. To avoid this vulnerability, you must remove RadChart's HTTP handler from a web.config (its type is Telerik.Web.UI.ChartHttpHandler).CVE-2026-2878progress softwaretelerik ui for asp.net ajax+10.31%7mo ago25-02-2026 14:45In Progress® Telerik® UI for AJAX, versions prior to 2026.1.225, an insufficient entropy vulnerability exists in RadAsyncUpload, where a predictable temporary identifier, based on timestamp and filename, can enable collisions and file content tampering.CVE-2026-13182progress softwaretelerik ui for asp.net ajax+10.50%3mo ago22-07-2026 13:34In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload client-state processing can distinguish decrypt failures from invalid-JSON parse failures, creating an oracle that reveals protected metadata values to remote attackers.

All vulnerabilities intelerik_ui_for_asp.net_ajax

CVE-2017-11357: Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References