High · 8.3 CVE-2024-11343 EUVD-2025-4578GHSA-9cqp-q38m-rfw4

Telerik Document Processing Path Traversal

Published Feb 12, 2025 · Updated Feb 12, 2025 · Assigned by ProgressSoftware

Vendor: Progress Software Product: Telerik Document Processing Libraries

Description

In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 (2025.1.205), unzipping an archive can lead to arbitrary file system access.

Affected products

Vendor	Product	Affected	Fixed
Progress Software	Telerik Document Processing Libraries	1.0.0 – < 2025.1.205	2025.1.205

References

https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-path-traversal-cve-2024-11343 vendor-advisory