{"cvss":9.8,"datePublished":"2020-10-20T00:00:00Z","dateUpdated":"2020-10-20T00:00:00Z","description":"Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution.","dueDate":"2023-02-16T00:00:00Z","id":"CVE-2017-11357","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Known","product":"User Interface (UI) for ASP.NET AJAX","requiredAction":"Apply updates per vendor instructions.","severity":"CRITICAL","source":"vulncheck_kev","title":"Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability","vendor":"Progress"}