CVE-2024-12629CWE-1321

Prototype Pollution in Progress® Telerik® KendoReact

Medium · published February 12, 2025

CVSS v3.1
4.1
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

In Progress® Telerik® KendoReact versions v3.5.0 through v9.4.0, an attacker can introduce or modify properties within the global prototype chain which can result in denial of service or command injection.

The record
Technical detail
CVSS v3.1
4.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00690 · 52.2th percentile
Weakness
CWE-1321 · Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Published
2025-02-12T15:37Z
EPSS history
Timeline
  • 12 FEB 15:37Z
    Prototype Pollution in Progress® Telerik® KendoReact
    cvelistv5