GHSA-9v96-j7x8-6wjv

Exploit Intelligence

• Arbitrary code execution analysis based on Telerik-UI. This will be done so that the article can be read by others. The document provides an in-depth explanation of the various vectors involved with Telerik-UI for ASP.NET AJAX, as well as POST requests, the architecture of ASP.NET AJAX, (github-poc-repo)
• Arbitrary code execution analysis based on Telerik-UI. This will be done so that the article can be read by others. The document provides an in-depth explanation of the various vectors involved with Telerik-UI for ASP.NET AJAX, as well as POST requests, the architecture of ASP.NET AJAX, (github-poc-repo)
• 0xr2r/CVE-2017-11317-auto-exploit- (github-poc-repo)
• 0xr2r/CVE-2017-11317-auto-exploit- (github-poc-repo)
• Telerik UI for ASP.NET AJAX File upload and .NET deserialisation exploit (CVE-2017-11317, CVE-2017-11357, CVE-2019-18935) (github-poc-repo)
• Telerik UI for ASP.NET AJAX File upload and .NET deserialisation exploit (CVE-2017-11317, CVE-2017-11357, CVE-2019-18935) (github-poc-repo)
• Unrestricted File Upload by Weak Encryption affected versions (CVE-2017-11317) 2. Remote Code Execution by Insecure Deserialization - (CVE-2019-18935) (github-poc-repo)
• Unrestricted File Upload by Weak Encryption affected versions (CVE-2017-11317) 2. Remote Code Execution by Insecure Deserialization - (CVE-2019-18935) (github-poc-repo)
• 0xr2r/CVE-2017-11317-auto-exploit- (github-poc)
• 0xr2r/CVE-2017-11317-auto-exploit- (github-poc)

…and 11 more exploits

Timeline

• CVE Published
• May 17, 2020 PoC Published
• Apr 9, 2026 Security Advisory