CVE-2024-12251
Improper neutralization special element in hyperlinks
In Progress Telerik UI for WinUI versions prior to 2025 Q1 (3.0.0), a command injection attack is possible through improper neutralization of hyperlink elements.
CVSS 3.1 · 7.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products