CVE-2025-0332 — Progress UI for WinForms decompression path traversal vulnerability

CVE-2025-0332

Progress UI for WinForms decompression path traversal vulnerability PUBLISHED

Description (CNA)

In Progress® Telerik® UI for WinForms, versions prior to 2025 Q1 (2025.1.211), using the improper limitation of a target path can lead to decompressing an archive's content into a restricted directory.

Affected (CNA)

Vendor / product	Versions
Progress Software / Progress® Telerik® UI for WinForms	affected 1.0.0 before 2025 Q1 (2025.1.211)

CWE

CWE-22

References

https://docs.telerik.com/devtools/winforms/knowledge-base/kb-security-path-traversal-cve-2025-0332

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.