Vulnerability Details CVE-2014-2217
Absolute path traversal vulnerability in the RadAsyncUpload control in the RadControls in Telerik UI for ASP.NET AJAX before Q3 2012 SP2 allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via a full pathname in the UploadID metadata value.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.037
EPSS Ranking 88.7%
CVSS Severity
CVSS v2 Score 7.5
Products affected by CVE-2014-2217
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:-
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2007.1423
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2007.1521
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2007.1626
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2007.21010
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2007.21107
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2007.2918
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2007.31218
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2007.31314
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2007.31425
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2008.1415
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2008.1515
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2008.1619
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2008.21001
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2008.2723
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2008.2826
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2008.31105
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2008.31125
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2008.31314
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2009.1311
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2009.1402
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2009.1527
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2009.2701
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2009.2826
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2009.31103
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2009.31208
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2009.31314
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.1309
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.1415
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.1519
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.2713
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.2826
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.2929
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.31109
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.31215
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.31317
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.1.315
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.1315
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.1413
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.1519
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.2712
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.2915
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.3.1305
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.31115
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.1.215
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.1.411
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.2.607
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.2.724
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.2.912
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.3.1016
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.3.1205
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.3.1308
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.1.220
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.1.403
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.1.417
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.2.611
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.2.717
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.3.1015
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.3.1114
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.3.1324
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2014.1.225
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2014.1.403
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2014.2.618
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2014.2.724
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2014.3.1024
-
cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2014.3.1209