VYPR
← All advisories
High severity7.8NVD Advisory· Published Feb 12, 2025· Updated May 21, 2026

CVE-2024-12251

CVE-2024-12251

Description

In Progress Telerik UI for WinUI versions prior to 2025 Q1 (3.0.0), a command injection attack is possible through improper neutralization of hyperlink elements.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Telerik/UI For Winui2 versions
    cpe:2.3:a:telerik:ui_for_winui:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:telerik:ui_for_winui:*:*:*:*:*:*:*:*range: >=2.0.0,<3.0.0
    • (no CPE)range: < 2025 Q1 (3.0.0)
  • Progress Software/Telerik UI for WinUIv5
    Range: 2.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.