CVE-2024-12629

7.2 highEPSS 0.7%

High (7.2) in progress kendoreact. EPSS 0.7% chance of exploitation in the next 30 days.

In Progress® Telerik® KendoReact versions v3.5.0 through v9.4.0, an attacker can introduce or modify properties within the global prototype chain which can result in denial of service or command injection.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-1321
Published: 2025-02-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

progress:kendoreact

References

https://www.telerik.com/kendo-react-ui/components/knowledge-base/kb-security-protoype-pollution-2024-12629

Check your stack JSON