Description
In Progress® Telerik® UI for Blazor versions v11.1.0 through v14.0.0, the demo application's Chat AI Integration example contains a relative path traversal vulnerability that could allow an attacker to read files outside of the chat attachments folder that are within the server's filesystem scope.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Progress Software | Telerik UI for Blazor | 11.1.0 <14.1.0 | — |