Vulnerabilities > CVE-2018-17060 - Unspecified vulnerability in Progress Telerik Extensions FOR Asp.Net MVC
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
Telerik Extensions for ASP.NET MVC (all versions) does not whitelist requests, which can allow a remote attacker to access files inside the server's web directory. NOTE: this product has been obsolete since June 2013.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |