Progress (ASP.NET AJAX and Sitefinity) Data Breach

Progress (ASP.NET AJAX and Sitefinity) experienced a data breach that was reported on November 3, 2021. Progress Telerik UI for ASP.NET AJAX and Sitefinity have a cryptographic weakness in Telerik.Web.UI.dll that can be exploited to disclose encryption keys (Telerik.Web.UI.DialogParametersEncryptionKey

Key Facts

Organization
Progress (ASP.NET AJAX and Sitefinity)
Date Reported
November 3, 2021
Incident Type
web app exploit
Industry
Technology
Severity Score
5/10
Confidence Level
high
Tags
web app exploit

Source

View original source - External link to primary source documentation

Understanding web app exploit Incidents

Web application exploits target vulnerabilities in websites and APIs. Secure development practices, WAFs, and penetration testing protect against these attacks.