CVE-2019-18935—Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability

漏洞名称

Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability

描述

Progress Telerik UI for ASP.NET AJAX contains a deserialization of untrusted data vulnerability through RadAsyncUpload which leads to code execution on the server in the context of the w3wp.exe process.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2019-18935

相关新闻文章

• UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux RootkitAugust 24, 2026
• XE Hacker Group Exploits VeraCore Zero-Day to Deploy Persistent Web ShellsFebruary 10, 2025
• Progress warns of critical RCE bug in Telerik Report ServerJuly 25, 2024

相关 CWE

• CWE-502