Telerik Forums
UI for ASP.NET Core Forum
1 answer
519 views

While scanning our projects for security vulnerabilites, we noticed that Telerik.UI.for.AspNet.Core  2023.2.606 references an of .NET Core 2.1 which is 5 years old and long since unsupported?   This means that using Telerik.UI.for.AspNet.Core immediately introduces the critical security vulnerabilies present in .NET Core 2.1.    Why does it depend on this ancient version of .NET?   

Here is a new completely empty project created just now (July 2023!) and you can see the references to .NET Core 2.1:

And here's a resulting security scan of this empty project:

 

Is .NET Core still supported by Telerik because it seems odd this hasn't been fixed in 5 years.

 

Aleksandar
Telerik team
 answered on 06 Jul 2023
0 answers
71 views

We often have hacking attempts like https://our_ip/Telerik.Web.UI.WebResource.axd?....

Can I change the name of WebResource.axd to something like xyz.axd?

Alfeu
Top achievements
Rank 1
 asked on 05 May 2023
Narrow your results
Selected tags
Tags
+? more
Top users last month
Mark
Top achievements
Rank 1
Yurii
Top achievements
Rank 1
Leland
Top achievements
Rank 2
Iron
Iron
Iron
Hon
Top achievements
Rank 1
Iron
Deltaohm
Top achievements
Rank 3
Bronze
Iron
Iron
Want to show your ninja superpower to fellow developers?
Top users last month
Mark
Top achievements
Rank 1
Yurii
Top achievements
Rank 1
Leland
Top achievements
Rank 2
Iron
Iron
Iron
Hon
Top achievements
Rank 1
Iron
Deltaohm
Top achievements
Rank 3
Bronze
Iron
Iron
Want to show your ninja superpower to fellow developers?
Want to show your ninja superpower to fellow developers?