Live › vulnerability › CVE-2017-9248
Go to dashboardProgress Telerik UI for ASP.NET AJAX and Sitefinity contain a cryptographic weakness in Telerik.Web.UI.dll. An attacker can use it to recover encryption keys, run cross-site scripting, tamper with ViewState, and upload or download files.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 0h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Progress ASP.NET AJAX and Sitefinity | vendor | – | – |
Search deployed web application bins for Telerik.Web.UI.dll and check its version against the vendor advisory; the sources do not give affected version ranges.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Progress Telerik UI for ASP.NET AJAX and Sitefinity have a cryptographic weakness in Telerik.Web.UI.dll that can be exploited to disclose encryption keys (Telerik.Web.UI.DialogParametersEncryptionKey and/or the MachineKey), perform cross-site-scripting (XSS) attacks, compromise the ASP.NET ViewState, and/or upload and download files.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2017-9248")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.