CISA known exploited vulnerability

CVE-2019-18935

Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability

SOURCE FACT

Progress · Telerik UI for ASP.NET AJAX

Progress Telerik UI for ASP.NET AJAX contains a deserialization of untrusted data vulnerability through RadAsyncUpload which leads to code execution on the server in the context of the w3wp.exe process.

Required action

Apply updates per vendor instructions.

CISA notes

https://nvd.nist.gov/vuln/detail/CVE-2019-18935

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

CVE-2019-18935

Progress · Telerik UI for ASP.NET AJAX

Required action

CISA notes

Could this product be present?