Security Alert for Progress Sitefinity and Telerik UI for ASP.NET AJAX

Security Alert for Progress Sitefinity and Telerik UI for ASP.NET AJAX

June 29, 2017 0 Comments

We have identified a security vulnerability affecting UI for ASP.NET AJAX that exists in versions of Telerik.Web.UI.dll assembly prior to 2017.2.621, as well as Sitefinity versions prior to 10.0.6412.0. We have addressed the issue and have notified customers and partners with details on how to fix the vulnerability.

For details, please review the respective KB articles:

Our sincere thanks to Erlend Leiknes, security consultant with Mnemonic AS, for disclosing this issue and helping in its resolution. We also wish to thank Thanh Van Tien Nguyen for his assistance and for providing further essential details.

progress-logo

The Progress Team

View all posts from The Progress Team on the Progress blog. Connect with us about all things application development and deployment, data integration and digital business.

Comments
Comments are disabled in preview mode.
Topics
Latest Stories
in Your Inbox

Subscribe to get all the news, info and tutorials you need to build better business apps and sites

More From Progress
270x123_Sitefinity 12 Is Here Effortlessly Deliver Complex Customer Experiences
Sitefinity 12 is Here: Effortlessly Deliver Complex Customer Experiences
Read More
 
232x131_Protecting Against the 10 Most Critical Web Security Risks
Protecting Against the 10 Most Critical Web Security Risks (Infographic)
Read More
 
g2crowd_thumbnail
G2 Crowd Report: Sitefinity vs. Sitecore
Read More