medium4.1
CVE-2024-12629
In Progress® Telerik® KendoReact versions v3.5.0 through v9.4.0, an attacker can introduce or modify properties within the global prototype chain which can res…
Impact
In Progress® Telerik® KendoReact versions v3.5.0 through v9.4.0, an attacker can introduce or modify properties within the global prototype chain which can result in denial of service or command injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Progress | Kendoreact | from 3.5.0 before 9.4.0 |