Lucene search
HistoryDec 25, 2014 - 9:59 p.m.
CVE-2014-2217
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
9.7
Confidence
High
EPSS
0.01
Percentile
84.1%
Absolute path traversal vulnerability in the RadAsyncUpload control in the RadControls in Telerik UI for ASP.NET AJAX before Q3 2012 SP2 allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via a full pathname in the UploadID metadata value.
Affected configurations
Node
telerikui_for_asp.net_ajaxRange≤2014.3.1209
| Vendor | Product | Version | CPE |
|---|---|---|---|
| telerik | ui_for_asp.net_ajax | * | cpe:2.3:a:telerik:ui_for_asp.net_ajax:*:*:*:*:*:*:*:* |
Related
prion
prion
Path traversal
2014-12-25 21:59:00
Unrestricted file upload
2022-07-07 21:15:00
cvelist
cvelist
CVE-2014-2217
2014-12-25 21:00:00
CVE-2021-29281
2022-07-07 19:38:54
cve
cve
CVE-2014-2217
2014-12-25 21:59:01
CVE-2021-29281
2022-07-07 21:15:09
nvd
nvd
CVE-2021-29281
2022-07-07 21:15:09
ics
ics
Hitachi ABB Power Grids eSOMS Telerik
2021-03-18 12:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
9.7
Confidence
High
EPSS
0.01
Percentile
84.1%
Related for NVD:CVE-2014-2217