CVE-2025-3600

Katalog CVE

CVSS 7.5 · High EPSS 25,1%

Kerentanan Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') pada progress telerik ui for asp.net ajax. Skor CVSS 3.1 7.5 (High) menurut progress.com.

Deskripsi (NVD)

In Progress® Telerik® UI for AJAX, versions 2011.2.712 to 2025.1.218, an unsafe reflection vulnerability exists that may lead to an unhandled exception resulting in a crash of the hosting process and denial of service.

Rincian

Terbit di NVD

14 Mei 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber progress.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

EPSS (30 hari)

25,1% peluang dieksploitasi; lebih tinggi dari 97,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-unsafe-reflection-cve-20... mitigasi · advisory vendor