Skip to content
CVE PROGRAM SOURCE RECORD4.1 Medium

CVE-2024-11628

Prototype Pollution in Progress® Telerik® Kendo UI for Vue

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ProgressSoftware

Description

In Progress® Telerik® Kendo UI for Vue versions v2.4.0 through v6.0.1, an attacker can introduce or modify properties within the global prototype chain which can result in denial of service or command injection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software Progress® Telerik® Kendo UI for Vue

Default version status: unaffected

  • 2.4.0 to < 6.1.0affected

References