Telerik UI Flaws Let Attackers Chain AES-CBC Padding Oracle to Unauthenticated RCE

Security researchers have identified a critical vulnerability chain in Progress Telerik UI for ASP.NET AJAX, which allows unauthenticated attackers to escala...