|
| 1 | +--- |
| 2 | +title: Address Telerik Document Processing Security Vulnerability |
| 3 | +description: Learn more about a fixed security vulnerability in Telerik Document Processing |
| 4 | +type: troubleshooting |
| 5 | +page_title: How to upgrade Telerik Document Processing to resove a security vulnerability |
| 6 | +slug: dpl-kb-security-vulnerability |
| 7 | +tags: blazor, dpl |
| 8 | +ticketid: |
| 9 | +res_type: kb |
| 10 | +--- |
| 11 | + |
| 12 | +## Environment |
| 13 | + |
| 14 | +<table> |
| 15 | + <tbody> |
| 16 | + <tr> |
| 17 | + <td>Product</td> |
| 18 | + <td>Telerik Document Processing</td> |
| 19 | + </tr> |
| 20 | + <tr> |
| 21 | + <td>Version</td> |
| 22 | + <td>Prior to 2025.1.205</td> |
| 23 | + </tr> |
| 24 | + </tbody> |
| 25 | +</table> |
| 26 | + |
| 27 | +## Description |
| 28 | + |
| 29 | +The [February 2025 release of Telerik Document Processing](https://docs.telerik.com/devtools/document-processing/release-notes/2025/release-notes-2025-1-205) resolves a couple of vulnerabilities: |
| 30 | + |
| 31 | +* [CVE-2024-11629](https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-rtf-filecontent-export-cve-2024-11629) |
| 32 | +* [CVE-2024-11343](https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-path-traversal-cve-2024-11343) |
| 33 | + |
| 34 | +>tip Telerik UI for Blazor uses [Telerik Document Processing](https://docs.telerik.com/devtools/document-processing/introduction) packages and APIs for its [Excel](slug:grid-export-excel), [CSV](slug:grid-export-csv) and [PDF](slug:grid-export-pdf) export features. **Telerik UI for Blazor is NOT affected by the mentioned resolved vulnerabilities.** This article exists only as a heads-up to customers who may be using Telerik Document Processing in their Telerik Blazor applications. |
| 35 | +
|
| 36 | +This article describes potential next steps for developers working specifically with Telerik Document Processing. |
| 37 | + |
| 38 | +## Solution |
| 39 | + |
| 40 | +No action is required if: |
| 41 | + |
| 42 | +* Your application is not referencing Telerik Document Processing packages explicitly. |
| 43 | +* Your application is not using `Telerik.Zip` APIs directly. |
| 44 | +* Your application is not importing an `HTML` file and exporting it to `RTF` format. |
| 45 | + |
| 46 | +If your use case scenario is the opposite of the listed items above, then: |
| 47 | + |
| 48 | +* [Get familiar with the vulnerabilities, their impact, and resolutions](#description). |
| 49 | +* Upgrade Telerik Document Processing to version **2025.1.205** or later. |
| 50 | + |
| 51 | +In addition, see [how to use different versions of Telerik UI for Blazor and Telerik Document Processing](slug:dpl-kb-version-conflict-detected-telerik-zip). |
| 52 | + |
| 53 | +## See Also |
| 54 | + |
| 55 | +* [Release Notes for Telerik Document Processing version 2025.1.205 (2025 Q1)](https://docs.telerik.com/devtools/document-processing/release-notes/2025/release-notes-2025-1-205) |
| 56 | +* [KB article for CVE-2024-11629](https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-rtf-filecontent-export-cve-2024-11629) |
| 57 | +* [KB article for CVE-2024-11343](https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-path-traversal-cve-2024-11343) |
0 commit comments