CVE-2025-0332

HIGH

Telerik UI for WinForms <2025.1.211 - Path Traversal

Title source: llm

Description

In Progress® Telerik® UI for WinForms, versions prior to 2025 Q1 (2025.1.211), using the improper limitation of a target path can lead to decompressing an archive's content into a restricted directory.

References (1)

Scores

CVSS v3 7.8
EPSS 0.0014
EPSS Percentile 34.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE
CWE-22
Status published

Affected Products (1)

progress/telerik_ui_for_winforms < 2025.1.211

Timeline

Published Feb 12, 2025
Tracked Since Feb 18, 2026