medium5.3
CVE-2018-17060
Telerik Extensions for ASP.NET MVC (all versions) does not whitelist requests, which can allow a remote attacker to access files inside the server's web direct…
Impact
Telerik Extensions for ASP.NET MVC (all versions) does not whitelist requests, which can allow a remote attacker to access files inside the server's web directory. NOTE: this product has been obsolete since June 2013.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Progress | Telerik Extensions For Asp.Net Mvc | All versions |