Skip to content

Commit a41004f

Browse files
authored
kb(dpl): Add KB for DPL vulnerability (#2763)
* kb(dpl): Add KB for DPL vulnerability * Update knowledge-base/dpl-security-vulnerability.md
1 parent de4c0e8 commit a41004f

File tree

1 file changed

+57
-0
lines changed

1 file changed

+57
-0
lines changed
Lines changed: 57 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,57 @@
1+
---
2+
title: Address Telerik Document Processing Security Vulnerability
3+
description: Learn more about a fixed security vulnerability in Telerik Document Processing
4+
type: troubleshooting
5+
page_title: How to upgrade Telerik Document Processing to resove a security vulnerability
6+
slug: dpl-kb-security-vulnerability
7+
tags: blazor, dpl
8+
ticketid:
9+
res_type: kb
10+
---
11+
12+
## Environment
13+
14+
<table>
15+
<tbody>
16+
<tr>
17+
<td>Product</td>
18+
<td>Telerik Document Processing</td>
19+
</tr>
20+
<tr>
21+
<td>Version</td>
22+
<td>Prior to 2025.1.205</td>
23+
</tr>
24+
</tbody>
25+
</table>
26+
27+
## Description
28+
29+
The [February 2025 release of Telerik Document Processing](https://docs.telerik.com/devtools/document-processing/release-notes/2025/release-notes-2025-1-205) resolves a couple of vulnerabilities:
30+
31+
* [CVE-2024-11629](https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-rtf-filecontent-export-cve-2024-11629)
32+
* [CVE-2024-11343](https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-path-traversal-cve-2024-11343)
33+
34+
>tip Telerik UI for Blazor uses [Telerik Document Processing](https://docs.telerik.com/devtools/document-processing/introduction) packages and APIs for its [Excel](slug:grid-export-excel), [CSV](slug:grid-export-csv) and [PDF](slug:grid-export-pdf) export features. **Telerik UI for Blazor is NOT affected by the mentioned resolved vulnerabilities.** This article exists only as a heads-up to customers who may be using Telerik Document Processing in their Telerik Blazor applications.
35+
36+
This article describes potential next steps for developers working specifically with Telerik Document Processing.
37+
38+
## Solution
39+
40+
No action is required if:
41+
42+
* Your application is not referencing Telerik Document Processing packages explicitly.
43+
* Your application is not using `Telerik.Zip` APIs directly.
44+
* Your application is not importing an `HTML` file and exporting it to `RTF` format.
45+
46+
If your use case scenario is the opposite of the listed items above, then:
47+
48+
* [Get familiar with the vulnerabilities, their impact, and resolutions](#description).
49+
* Upgrade Telerik Document Processing to version **2025.1.205** or later.
50+
51+
In addition, see [how to use different versions of Telerik UI for Blazor and Telerik Document Processing](slug:dpl-kb-version-conflict-detected-telerik-zip).
52+
53+
## See Also
54+
55+
* [Release Notes for Telerik Document Processing version 2025.1.205 (2025 Q1)](https://docs.telerik.com/devtools/document-processing/release-notes/2025/release-notes-2025-1-205)
56+
* [KB article for CVE-2024-11629](https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-rtf-filecontent-export-cve-2024-11629)
57+
* [KB article for CVE-2024-11343](https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-path-traversal-cve-2024-11343)

0 commit comments

Comments
 (0)