In ProgressĀ® TelerikĀ® Document Processing Libraries, versions prior to 2025 Q1 (2025.1.205), unzipping an archive can lead to arbitrary file system access.
References
| Link | Resource |
|---|---|
| https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-path-traversal-cve-2024-11343 | Vendor Advisory |
Configurations
History
No history.
Information
Published : 2025-02-12 16:15
Updated : 2025-02-20 20:39
NVD link : CVE-2024-11343
Mitre link : CVE-2024-11343
CVE.ORG link : CVE-2024-11343
JSON object : View
Products Affected
progress
- telerik_document_processing_libraries
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
