TI-2017-08395 Aliases CVE-2017-11357 GHSA-52hx-8455-4qwv

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user…

CRITICAL 100Exploited in the wildCWE-434Published 2017-08-23 · Updated 2026-08-14

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-434.

Summary

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.

Why it matters now

Exploitation Active In CISA KEV since 2023-01-26CISA due date 2023-02-16Known ransomware use

EPSS 0.77679 99th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA and NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Active
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax::::::::	before 2020.1.114	Vulnerable	Progress

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:*:*:*:*:*:*:*:* Versions before 2020.1.114 Vulnerable ·Progress

Remediation

No fixed version listed by the sources yet.

Timeline

2023-01-26 Added to CISA KEV
2026-10-02 Threatist record created from CVE-2017-11357
2026-10-03 Alias added: GHSA-52hx-8455-4qwv

References

Exploit 1

43874

Advisory 1

http://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/insecure-direct-object-reference

TI-2024-04060 Registration Authentication Bypass Vulnerability KEVCVSS 3.1CRITICAL 9.8
TI-2019-13651 Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization… KEVCVSS 3.1CRITICAL 9.8
TI-2017-08355 Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2… KEVCVSS 3.1CRITICAL 9.8
TI-2017-06690 Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and… KEVCVSS 3.1CRITICAL 9.8
TI-2019-14262 Path traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to… CVSS 3.1CRITICAL 9.8
TI-2024-09358 Progress UI for WPF format provider unsafe deserialization vulnerability CVSS 3.1CRITICAL 9.8

See all 16 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences