CVE-2024-11628

7.2 highEPSS 0.7%

High (7.2) in progress kendo ui for vue. EPSS 0.7% chance of exploitation in the next 30 days.

In Progress® Telerik® Kendo UI for Vue versions v2.4.0 through v6.0.1, an attacker can introduce or modify properties within the global prototype chain which can result in denial of service or command injection.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-1321
Published: 2025-02-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

progress:kendo_ui_for_vue

References

https://www.telerik.com/kendo-vue-ui/components/knowledge-base/kb-security-protoype-pollution-2024-11628

Check your stack JSON