Skip to content

CVE-2017-11317 and CVE-2017-9248 not detected for Telerik.Web.UI 2014 #4320

@aguacongas

Description

@aguacongas

Describe the bug
Telerik.Web.UI before R1 2017 has Vulnerabilities CVE-2017-11317 and CVE-2017-9248 but not detected by dependency-check.

Version of dependency-check used
7.0.4

Log file
log

To Reproduce
Steps to reproduce the behavior:

  1. Create a Telerik trial account if you don't have one
  2. Setup nuget CLI with your Telerik account
  3. Download Telerik.Web.UI with the nuget command : nuget install Telerik.Web.UI -version 2014.1.225.45
  4. Scan the nuget package : dependency-check.bat --scan .\Telerik.Web.UI.2014.1.225.45\*.*

Expected behavior
Report should contains Telerik.Web.UI vulnerabilities

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions