Description
Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Telerik UI ASP.NET AJAX RadAsyncUpload Deserialization
exploit/windows/http/telerik_rau_deserialization
Exploit-DB 1
- Telerik UI for ASP.NET AJAX 2012.3.1308 < 2017.1.118 - Arbitrary File Upload EDB-43874 · webapps · Jan 24, 2018
GitHub 3 repositories
-
bao7uo/RAU_crypto ★ 177 · Jan 9, 2018
Telerik UI for ASP.NET AJAX File upload and .NET deserialisation exploit (CVE-2017-11317, CVE-2017-11357, CVE-2019-18935)
-
0xr2r/CVE-2017-11317-auto-exploit- ★ 1 · Aug 15, 2025
-
KasunPriyashan/Telerik-UI-ASP.NET-AJAX-Exploitation ★ 1 · Oct 13, 2022
Unrestricted File Upload by Weak Encryption affected versions (CVE-2017-11317) 2. Remote Code Execution by Insecure Deserialization - (CVE-2019-18935)
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- ICSA-21-077-03 Hitachi ABB Power Grids eSOMS Telerik CISA ICS & IT advisories · Mar 18, 2021