Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Telerik Subscribe
Filtered by product Ui For Silverlight
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-11414 1 Telerik 1 Ui For Silverlight 2020-04-02 5.0 MEDIUM 7.5 HIGH
An issue was discovered in Progress Telerik UI for Silverlight before 2020.1.330. The RadUploadHandler class in RadUpload for Silverlight expects a web request that provides the file location of the uploading file along with a few other parameters. The uploading file location should be inside the directory where the upload handler class is defined. Before 2020.1.330, a crafted web request could result in uploads to arbitrary locations.