PT-2025-6501 · Telerik · Telerik Document Processing Libraries

Published 2025-02-12 · Updated 2025-02-20 · CVE-2024-11343

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions In Progress Telerik Document Processing Libraries versions prior to 2025.1.205

Description The issue allows arbitrary file system access when unzipping an archive.

Recommendations For versions prior to 2025.1.205, update to version 2025.1.205 or later to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-11343

Affected Products

Telerik Document Processing Libraries

References · 7

• https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-path-traversal-cve-2024-11343 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-11343 · Security Note
• https://osv.dev/vulnerability/CVE-2024-11343 · Vendor Advisory
• https://twitter.com/CVEnew/status/1889761648052965807 · Twitter Post
• https://t.me/cvedetector/17893 · Telegram Post
• https://t.me/cvenotify/111947 · Telegram Post
• https://twitter.com/CveFindCom/status/1889706724455588122 · Twitter Post