Approved changes feed: RSS · Atom

cpe:2.3:a:telerik:ui_for_silverlight:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTelerik (2eb2c60f-8174-53cf-a0ac-2d27ec15a252)
ProductUi For Silverlight (0e7bf7a6-5836-5f73-81f3-7c11209a8317)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-11414 vulnerable 2026-06-03 14:41:26.076843 Details available
An issue was discovered in Progress Telerik UI for Silverlight before 2020.1.330. The RadUploadHandler class in RadUpload for Silverlight expects a web request that provides the file location of the uploading file along with a few other parameters. The uploading file location should be inside the directory where the upload handler class is defined. Before 2020.1.330, a crafted web request could result in uploads to arbitrary locations.
Published: 2020-03-31T12:15:24.000Z
Updated: 2024-08-04T11:28:13.986Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.