Telerik : Security Vulnerabilities, CVEs, Published In 2014
Cross-site scripting (XSS) vulnerability in Telerik UI for ASP.NET AJAX RadEditor control 2014.1.403.35, 2009.3.1208.20, and other versions allows remote attackers to inject arbitrary web script or HTML via CSS expressions in style attributes.
Max CVSS
4.3
EPSS Score
0.22%
Published
2014-09-26
Updated
2015-09-16
Absolute path traversal vulnerability in the RadAsyncUpload control in the RadControls in Telerik UI for ASP.NET AJAX before Q3 2012 SP2 allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via a full pathname in the UploadID metadata value.
Max CVSS
7.5
EPSS Score
1.35%
Published
2014-12-25
Updated
2014-12-29
2 vulnerabilities found