PT-2025-6509
CVE-2024-11629
·
Published
2025-02-12
·
Updated
2025-02-12
Description by
CVSS 3.1
7.1
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
Name of the Vulnerable Software and Affected Versions
In Progress Telerik Document Processing Libraries versions prior to 2025 Q1 (2025.1.205)
Description
The contents of a file at an arbitrary path can be exported to RTF, potentially allowing unauthorized access to sensitive information. This issue affects libraries using .NET Standard 2.0.
Recommendations
For versions prior to 2025 Q1 (2025.1.205), update to version 2025.1.205 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾