PT-2025-6509

CVE-2024-11629

·

Published

2025-02-12

·

Updated

2025-02-12

Description by

CVSS 3.1
7.1
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
Name of the Vulnerable Software and Affected Versions In Progress Telerik Document Processing Libraries versions prior to 2025 Q1 (2025.1.205)
Description The contents of a file at an arbitrary path can be exported to RTF, potentially allowing unauthorized access to sensitive information. This issue affects libraries using .NET Standard 2.0.
Recommendations For versions prior to 2025 Q1 (2025.1.205), update to version 2025.1.205 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾