In Progress Telerik UI for WinForms versions prior to 2024 Q3 (2024.3.924), a command injection attack is possible through improper neutralization of hyperlink elements.
2024-09-25T14:15:06.180
2024-10-01T17:16:17.397
Analyzed
CVSSv3.1: 7.8 (HIGH)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | telerik | ui_for_wpf | < 2024.3.924 | Yes |