ACTIVELY EXPLOITED
CVE-2017-11317: Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability
| Vendor | Telerik |
|---|---|
| Product | User Interface (UI) for ASP.NET AJAX |
| Actively exploited | Yes |
| Added to CISA KEV | 11 Apr 2022 |
| CISA federal deadline | 2 May 2022 |
| Weakness (CWE) | CWE-326 |
Required action (CISA's text)
Apply updates per vendor instructions.
Description (NVD)
Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX allows remote attackers to perform arbitrary file uploads or execute arbitrary code.
SOURCES
Other Telerik flaws
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.