CN

CyberNewsUz

Threat Intelligence Portal

LOADING0%

Yangiliklar CVE Tracker Exploitlar Hujumlar Xarita

CN

CyberNewsUz

Threat Intelligence Portal

LOADING0%

O'zbek tilidagi kiberxavfsizlik portali. Yangiliklar, CVE tracker, hujumlar bazasi.

Yangiliklar

Barcha yangiliklar
Hujumlar
Zayifliklar
O'zbekiston
Jahon

Asboblar

CVE Tracker
Exploit DB
Hujumlar bazasi
Threat xarita

Loyiha

Biz haqimizda

© 2026 CyberNewsUz. Barcha huquqlar himoyalangan.

CVE Tracker ga qaytish

CVE-2017-11357

Kritik(9.8)

R2 2017 SP2 dan oldin ASP.NET AJAX uchun Progress Telerik UI foydalanuvchi kiritishini RadAsyncUpload-ga to'g'ri cheklamaydi, bu masofaviy hujumchilarga o'zboshimchalik bilan fayllarni yuklash yoki o'zboshimchalik kodini bajarish imkonini beradi.

Vendor

Telerik

Product

Ui For Asp.Net Ajax

CVSS Score

9.8

Nashr sanasi

23-avg, 2017

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Manbalar

http://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/insecure-direct-object-reference
https://www.exploit-db.com/exploits/43874/
http://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/insecure-direct-object-reference
https://www.exploit-db.com/exploits/43874/
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-11357

Yangi kritik zaifliklar

CyberNewsUz — CVE-2017-11357