In Progress® Telerik® UI for WinForms, versions prior to 2025 Q1 (2025.1.211), using the improper limitation of a target path can lead to decompressing an archive's content into a restricted directory.
2025-02-12T16:15:42.703
2025-07-03T18:30:06.820
Analyzed
CVSSv3.1: 7.8 (HIGH)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | progress | telerik_ui_for_winforms | < 2025.1.211 | Yes |