PT-2025-6509 · Telerik · Telerik Document Processing Libraries

Published 2025-02-12 · Updated 2025-02-12 · CVE-2024-11629

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions In Progress Telerik Document Processing Libraries versions prior to 2025 Q1 (2025.1.205)

Description The contents of a file at an arbitrary path can be exported to RTF, potentially allowing unauthorized access to sensitive information. This issue affects libraries using .NET Standard 2.0.

Recommendations For versions prior to 2025 Q1 (2025.1.205), update to version 2025.1.205 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.

Fix

Files Accessible to External Parties

Weakness Enumeration

CWE-552

Related Identifiers

CVE-2024-11629

Affected Products

Telerik Document Processing Libraries

References · 5

• https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-rtf-filecontent-export-cve-2024-11629 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-11629 · Security Note
• https://osv.dev/vulnerability/CVE-2024-11629 · Vendor Advisory
• https://t.me/cvedetector/17922 · Telegram Post
• https://twitter.com/CVEnew/status/1889761643489542290 · Twitter Post