/claim #14278

PR Information

• Added CVE-2019-18935
• References:
  • https://nvd.nist.gov/vuln/detail/CVE-2019-18935
  • https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-074a
  • https://bishopfox.com/blog/cve-2019-18935-remote-code-execution-in-telerik-ui
  • https://github.com/noperator/CVE-2019-18935
  • https://github.com/bao7uo/RAU_crypto

Template validation

• Validated with a host running a vulnerable version and/or configuration (True Positive)
• Validated with a host running a patched version and/or configuration (avoid False Positive)

Additional Details

Detection Methodology: Behavior-based POC using pre-computed encrypted payloads with default Telerik keys (PrivateKeyForEncryptionOfRadAsyncUploadConfiguration).

Limitation: Requires default Telerik encryption keys. Documented in template description.

Additional References:

• Nuclei Template Creation Guideline
• Nuclei Template Matcher Guideline
• Nuclei Template Contribution Guideline
• PD-Community Discord server