Progress Telerik Document Processing Libraries vulnerabilities

3 CVEs affecting Progress Telerik Document Processing Libraries, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-11629, published 2025-02-12.

More from Progress.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-11343, published 2025-02-12. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 (2025.1.205), unzipping an archive can lead to arbitrary file system access.
• CVE-2024-8049, published 2024-11-13. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. In Progress Telerik Document Processing Libraries, versions prior to 2024 Q4 (2024.4.1106), importing a document with unsupported features can lead to excessive processing, leading to excessive use…
• CVE-2024-11629, published 2025-02-12. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 (2025.1.205), using .NET Standard 2.0, the contents of a file at an arbitrary path can be exported to RTF.