Lucene search
PRIOn knowledge basePRION:CVE-2014-2217HistoryDec 25, 2014 - 9:59 p.m.
Path traversal
2014-12-2521:59:00
PRIOn knowledge base
www.prio-n.com
6
7.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.013 Low
EPSS
Percentile
85.8%
Absolute path traversal vulnerability in the RadAsyncUpload control in the RadControls in Telerik UI for ASP.NET AJAX before Q3 2012 SP2 allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via a full pathname in the UploadID metadata value.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ui_for_asp.net_ajax | le | 2014.3.1209 |
Related
cve
cve
CVE-2014-2217
2014-12-25 21:59:00
CVE-2021-29281
2022-07-07 21:15:00
prion
prion
Unrestricted file upload
2022-07-07 21:15:00
ics
ics
Hitachi ABB Power Grids eSOMS Telerik
2021-03-18 12:00:00
7.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.013 Low
EPSS
Percentile
85.8%
Related for PRION:CVE-2014-2217