Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-0332

Progress UI for WinForms decompression path traversal vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ProgressSoftware

Description

In Progress® Telerik® UI for WinForms, versions prior to 2025 Q1 (2025.1.211), using the improper limitation of a target path can lead to decompressing an archive's content into a restricted directory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software Progress® Telerik® UI for WinForms

Default version status: affected

  • 1.0.0 to < 2025 Q1 (2025.1.211)affected

References