In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload upload metadata processing may leak cryptographic validity through measurable timing differences, enabling remote attackers to recover protected metadata values.
| Vendor | Product | Versions |
|---|---|---|
| progress | telerik ui for asp.net ajax | 2010.1.309 |
Added affected version 2026.2.707 based on article's explicit version range statement
Initial creation
