In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of the language parameter in the spell check handler may allow an attacker to influence server-side file path resolution and trigger unintended server-side requests.
| Vendor | Product | Versions |
|---|---|---|
| progress | telerik ui for asp.net ajax | 2011.2.712 |
Updated severity from HIGH to CRITICAL, added CWE-918 (Server-Side Request Forgery), clarified attack vector as SSRF, and refined description with explicit SSRF vulnerability details.
Initial creation
