In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a command injection attack is possible through improper neutralization of hyperlink elements.
2024-09-25T14:15:05.750
2024-10-03T13:52:23.060
Analyzed
CVSSv3.1: 7.8 (HIGH)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | telerik | ui_for_wpf | < 2024.3.924 | Yes |