Approved changes feed: RSS · Atom

cpe:2.3:a:progress_software:telerik_kendoreact:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorProgress Software (96c4320b-2c72-5331-bd5a-d39d72393793)
ProductTelerik Kendoreact (cdc38e79-fdbb-5495-97d6-a6f21fcbe685)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12629 vulnerable 2026-06-03 14:54:22.800926 Prototype Pollution in Progress® Telerik® KendoReact
MEDIUM (4.1)
In Progress® Telerik® KendoReact versions v3.5.0 through v9.4.0, an attacker can introduce or modify properties within the global prototype chain which can result in denial of service or command injection.
Published: 2025-02-12T15:37:51.840Z
Updated: 2025-02-12T15:55:43.633Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.