CVE-2024-11629

In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 2025.1.205, using .NET Standard 2.0, the contents of a file at an arbitrary path can be exported to RTF...

CVE-2024-11629

In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 2025.1.205, using .NET Standard 2.0, the contents of a file at an arbitrary path can be exported to RTF...

CVE-2024-11629 Telerik Document Processing RTF Export of Arbitrary File Path

In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 2025.1.205, using .NET Standard 2.0, the contents of a file at an arbitrary path can be exported to RTF...

CVE-2024-11629 Telerik Document Processing RTF Export of Arbitrary File Path

In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 2025.1.205, using .NET Standard 2.0, the contents of a file at an arbitrary path can be exported to RTF...

CVE-2024-11629

CVE-2024-11629 affects Progress Telerik Document Processing Libraries (prior to 2025 Q1, version 2025.1.205) when targeting .NET Standard 2.0. The issue allows exporting the contents of a file at an arbitrary path to RTF, indicating an potential arbitrary file read/export vulnerability due to the...

CVE-2024-11343

In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 2025.1.205, unzipping an archive can lead to arbitrary file system access...

CVE-2024-11343 Telerik Document Processing Path Traversal

In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 2025.1.205, unzipping an archive can lead to arbitrary file system access...

CVE-2024-11343 Telerik Document Processing Path Traversal

In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 2025.1.205, unzipping an archive can lead to arbitrary file system access...

CVE-2024-11343

CVE-2024-11343 affects In Progress® Telerik® Document Processing Libraries. A path traversal flaw exists when unzipping archives in versions prior to 2025 Q1 (2025.1.205), enabling arbitrary file system access. Public details consistently identify this as a path traversal issue and state that upg...

Progress Telerik Document Processing Libraries: Path traversal vulnerability

Progress Telerik Document Processing Libraries is a document processing library from Progress USA. A path traversal vulnerability exists in Progress Telerik Document Processing Libraries prior to version 2025 Q1, which stems from the fact that an unzip archive operation could lead to arbitrary fi...

CVE-2024-11629: Files or Directories Accessible to External Parties

In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 2025.1.205, using .NET Standard 2.0, the contents of a file at an arbitrary path can be exported to RTF...

CVE-2024-11343: Improper Limitation of a Pathname to a Restricted Directory

In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 2025.1.205, unzipping an archive can lead to arbitrary file system access...

PT-2025-6501 · Telerik · Telerik Document Processing Libraries

Name of the Vulnerable Software and Affected Versions: In Progress Telerik Document Processing Libraries versions prior to 2025.1.205 Description: The issue allows arbitrary file system access when unzipping an archive. Recommendations: For versions prior to 2025.1.205, update to version 2025.1.2...

PT-2025-6509

Name of the Vulnerable Software and Affected Versions In Progress Telerik Document Processing Libraries versions prior to 2025 Q1 2025.1.205 Description The contents of a file at an arbitrary path can be exported to RTF, potentially allowing unauthorized access to sensitive information. This issu...

Progress Telerik Document Processing Libraries Security Vulnerabilities

Progress Telerik Document Processing Libraries is a document processing library from Progress USA. A security vulnerability exists in Progress Telerik Document Processing Libraries prior to version 2025 Q1, which originates from the ability to export the contents of a file in an arbitrary path to...

PT-2025-34632

Name of the Vulnerable Software and Affected Versions: PhpOffice/PhpSpreadsheet versions prior to 1.30.0 PhpOffice/PhpSpreadsheet versions prior to 2.1.12 PhpOffice/PhpSpreadsheet versions prior to 2.4.0 PhpOffice/PhpSpreadsheet versions prior to 3.10.0 PhpOffice/PhpSpreadsheet versions prior to...

M-Files Server Authentication Bypass Privilege Escalation

The vulnerability of the M-Files Server platform for automating document processing in Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain increased privileges...

Ghostscript psi/zcolor.c DoS

The vulnerability of the psi/zcolor.c component of the software suite for processing, transforming, and generating Ghostscript documents is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

CVE-2024-8049

In Progress Telerik Document Processing Libraries, versions prior to 2024 Q4 2024.4.1106, importing a document with unsupported features can lead to excessive processing, leading to excessive use of computing resources leaving the application process unavailable...

CVE-2024-8049

In Progress Telerik Document Processing Libraries, versions prior to 2024 Q4 2024.4.1106, importing a document with unsupported features can lead to excessive processing, leading to excessive use of computing resources leaving the application process unavailable...