What is CVE-2021-28141?

CVE-2021-28141 is a critical-severity vulnerability in Progress Telerik_ui_for_asp.net_ajax, classified under Missing Authorization. CVSS score: 9.8/10. Published 2021-03-11.

How severe is CVE-2021-28141?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Auth bypass in Progress Telerik_ui_for_asp.net_ajax

CVE-2021-28141

An issue was discovered in Progress Telerik UI for ASP.NET AJAX 2021.1.224. It allows unauthorized access to MicrosoftAjax.js through the Telerik.Web.UI.WebResource.axd file. This may allow the attacker to gain unauthorized access to the s…

Vulnerability class: Broken Access Control

EPSS: 0.022 (80.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Progress Telerik_ui_for_asp.net_ajax — versions 2021.1.224
N/a — versions n/a

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-28141?: CVE-2021-28141 is a critical-severity vulnerability in Progress Telerik_ui_for_asp.net_ajax, classified under Missing Authorization. CVSS score: 9.8/10. Published 2021-03-11.
How severe is CVE-2021-28141?: Critical severity. CVSS v3 base score is 9.8 out of 10.