CVE-2024-11629 — Telerik Document Processing RTF Export of Arbitrary File Path

CVE-2024-11629

Telerik Document Processing RTF Export of Arbitrary File Path PUBLISHED

Description (CNA)

In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 (2025.1.205), using .NET Standard 2.0, the contents of a file at an arbitrary path can be exported to RTF.

Affected (CNA)

Vendor / product	Versions
Progress Software / Progress® Telerik® Document Processing Libraries	affected 1.0.0 before 2025.1.205

CWE

CWE-552

References

https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-rtf-filecontent-export-cve-2024-11629

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.