Volerion logoVolerion
Volerion logoVolerion

Progress Telerik UI for WinForms Path Traversal Vulnerability

Vulnerability

A path traversal vulnerability has been identified in Progress Telerik UI for WinForms, affecting versions prior to 2025 Q1 (2025.1.211). The issue arises from improper limitations on target paths, which can allow an archive's contents to be decompressed into a restricted directory.

Impact

Exploitation of this vulnerability could lead to unauthorized file extraction into sensitive directories, potentially overwriting existing files or disrupting application functionality.

Remediation

Users are advised to upgrade to Progress Telerik UI for WinForms version 2025 Q1 (2025.1.211).

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
0.0
exploitability
3.3
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.