CVE-2024-11628CWE-1321

Prototype Pollution in Progress® Telerik® Kendo UI for Vue

Medium · published February 12, 2025

CVSS v3.1
4.1
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

In Progress® Telerik® Kendo UI for Vue versions v2.4.0 through v6.0.1, an attacker can introduce or modify properties within the global prototype chain which can result in denial of service or command injection.

The record
Technical detail
CVSS v3.1
4.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00690 · 52.2th percentile
Weakness
CWE-1321 · Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Published
2025-02-12T16:17Z
EPSS history
Timeline
  • 12 FEB 16:17Z
    Prototype Pollution in Progress® Telerik® Kendo UI for Vue
    cvelistv5