PT-2025-6781 · Progress · In Progress Telerik Ui For Winforms

CVE-2025-0332

·

Publicado

2025-02-12

·

Atualizado

2025-07-03

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions In Progress Telerik UI for WinForms versions prior to 2025 Q1 (2025.1.211)
Description The issue is related to the improper limitation of a target path, which can lead to decompressing an archive's content into a restricted directory. This can occur when using In Progress Telerik UI for WinForms.
Recommendations For versions prior to 2025 Q1 (2025.1.211), update to version 2025 Q1 (2025.1.211) or later to resolve the issue.

Correção

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2025-0332

Produtos afetados

In Progress Telerik Ui For Winforms