Vulnerability Details CVE-2024-12251
In Progress Telerik UI for WinUI versions prior to 2025 Q1 (3.0.0), a command injection attack is possible through improper neutralization of hyperlink elements.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 40.2%
CVSS Severity
CVSS v3 Score 7.8
References
Products affected by CVE-2024-12251
-
cpe:2.3:a:progress:telerik_ui_for_winui:2.0.0
-
cpe:2.3:a:progress:telerik_ui_for_winui:2.1.0
-
cpe:2.3:a:progress:telerik_ui_for_winui:2.10.0
-
cpe:2.3:a:progress:telerik_ui_for_winui:2.10.1
-
cpe:2.3:a:progress:telerik_ui_for_winui:2.11.0
-
cpe:2.3:a:progress:telerik_ui_for_winui:2.2.0
-
cpe:2.3:a:progress:telerik_ui_for_winui:2.3.0
-
cpe:2.3:a:progress:telerik_ui_for_winui:2.4.0
-
cpe:2.3:a:progress:telerik_ui_for_winui:2.5.0
-
cpe:2.3:a:progress:telerik_ui_for_winui:2.6.0
-
cpe:2.3:a:progress:telerik_ui_for_winui:2.7.0
-
cpe:2.3:a:progress:telerik_ui_for_winui:2.8.0
-
cpe:2.3:a:progress:telerik_ui_for_winui:2.8.1
-
cpe:2.3:a:progress:telerik_ui_for_winui:2.9.0