Known Exploited Vulnerability: CVE-2017-11357

Vendor: Telerik

Product: User Interface (UI) for ASP.NET AJAX

Required action: Apply updates per vendor instructions.

Known ransomware campaign use: Known

Notes: https://docs.telerik.com/devtools/aspnet-ajax/knowledge-base/asyncupload-insecure-direct-object-reference https://nvd.nist.gov/vuln/detail/CVE-2017-11357

CWEs