PT-2026-63403 · Progress · Telerik Ui For Ajax
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Telerik UI for AJAX versions prior to 2026.2.708
Description
Insufficient validation of the
language parameter in the spell check handler allows an attacker to influence server-side file path resolution. This can lead to the triggering of unintended server-side requests.Recommendations
Update to version 2026.2.708 or later.
Restrict use of the
language parameter in the spell check handler until the update is applied.Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Telerik Ui For Ajax