We recently went to address a vulnerability finding in our application whereby a user could exploit a vulnerability in the Telerik.Web.UI version 2015.3.1111.45. Unfortunately after applying the patched version of this assembly, when running the exploit by calling [site root]/Telerik.Web.UI.DialogHandler.aspx?DialogName=DocumentManager&renderMode=2&Skin=Default&Title=Document%20Manager&dpptn=&isRtl=false&dp={xxxxxxx}. The page returns a response of:
Error Message:The hash is not valid!
Our security team feels this error message is revealing, and would prefer to have a generic error message. We have a custom static generic html error message page for our site to catch all unhandled exceptions. Unfortunately, this error from Telerik.Web.UI does not fall through to the application level and there is apparently no way to override this error message. Please provide some kind of API or means to change the contents of this error message.
