CVE-2024-7679 — Improper neutralization special element in hyperlinks

CVE-2024-7679

Improper neutralization special element in hyperlinks PUBLISHED

Description (CNA)

In Progress Telerik UI for WinForms versions prior to 2024 Q3 (2024.3.924), a command injection attack is possible through improper neutralization of hyperlink elements.

Affected (CNA)

Vendor / product	Versions
Progress Software / Telerik UI for WinForms	affected 2014.3.1021 before 2024.3.924

CWE

CWE-77

References

https://docs.telerik.com/devtools/winforms/knowledge-base/command-injection-cve-2024-7679

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.