{"id":"CVE-2017-11317","kind":"vulnerability","aliases":["CVE-2017-11317"],"related":[],"title":"Telerik User Interface (UI) for ASP.NET AJAX: Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability","description":"Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.","summary":"Telerik UI for ASP.NET AJAX (Telerik.Web.UI) has an unrestricted file upload flaw that lets remote attackers upload arbitrary files. The sources say the flaw can also lead to arbitrary code execution on the server.","severity":"critical","cvss":9.8,"epss":0.84175,"exploited":true,"exploited_at":"2022-04-11T00:00:00+00:00","products":[{"name":"Telerik User Interface (UI) for ASP.NET AJAX","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["asp.net","exploited","iis","package","telerik","windows"],"not_affected_if":["unknown"],"how_to_check":"Find Telerik.Web.UI.dll in your ASP.NET application bins and check its version against the vendor advisory; the sources do not give a specific version range.","fix":"Upgrade Telerik UI for ASP.NET AJAX to a patched release per the vendor instructions; the sources do not name the fixed version.","status":"open","published_at":"2017-08-23T17:29:00+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:18:04+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-23T21:18:04Z","model":"claude-haiku-5-5","output":{"fix":"Upgrade Telerik UI for ASP.NET AJAX to a patched release per the vendor instructions; the sources do not name the fixed version.","reach":"internet","impact":"high","summary":"Telerik UI for ASP.NET AJAX (Telerik.Web.UI) has an unrestricted file upload flaw that lets remote attackers upload arbitrary files. The sources say the flaw can also lead to arbitrary code execution on the server.","category":"package","who_cares":["asp.net","telerik","iis","windows"],"confidence":0.7,"needs_auth":"unknown","worst_case":"Attacker uploads files and executes arbitrary code on the web server","analyst_note":"Confirm affected and fixed Telerik.Web.UI versions and the upload handler conditions at the Telerik advisory and the CISA KEV entry.","how_to_check":"Find Telerik.Web.UI.dll in your ASP.NET application bins and check its version against the vendor advisory; the sources do not give a specific version range.","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000494,"input_tokens":2879,"output_tokens":412,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-11317':19A,22A '-2017':18A,21A '2017':80C,85C 'ajax':7A,12A,29A,40B,77C 'allow':92C 'also':61B 'arbitrari':53B,64B,97C,102C 'asp.net':6A,11A,28A,30B,39B,76C 'attack':51B,94C 'code':65B,103C 'cve':17A,20A 'encrypt':90C 'execut':66B,101C 'exploit':31B 'file':14A,45B,54B,98C 'flaw':47B,59B 'for':27A 'ii':32B 'interfac':3A 'interface':25A 'lead':62B 'let':49B 'packag':33B 'perform':96C 'progress':72C 'r1':79C 'r2':82C,84C 'radasyncupload':89C 'remot':50B,93C 'say':57B 'server':69B 'sourc':56B 'sp2':86C 'telerik':1A,8A,23A,34B,36B,73C 'telerik.web.ui':41B,70C 'ui':4A,9A,26A,37B,74C 'unrestrict':13A,44B 'upload':15A,46B,52B,99C 'use':87C 'user':2A,24A 'vulner':16A 'weak':88C 'window':35B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2017-08-23T17:29:00+00:00","kev":{"dateAdded":"2022-04-11","dueDate":"2022-05-02","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2017-11317","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11317","severity":null,"published_at":"2022-04-11T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T19:35:24+00:00","note":null},{"source":"epss","external_id":"CVE-2017-11317","url":"https://api.first.org/data/v1/epss?cve=CVE-2017-11317","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2017-11317","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11317","severity":null,"published_at":"2017-08-23T17:29:00+00:00","modified_at":"2026-06-17T01:01:36+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}