CVE-2024-7679

HIGH

Improper neutralization special element in hyperlinks

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-7679 has a selected CVSS score of 7.8 (high).

Description

In Progress Telerik UI for WinForms versions prior to 2024 Q3 (2024.3.924), a command injection attack is possible through improper neutralization of hyperlink elements.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Oct 7, 2024 · VulnCheck
Reported exploitation
Observed · VulnCheck

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 25, 2024 · Source: CVE List

Affected products and versions

3
ProductSourceVersion range

ui_for_wpf

Browse Progress / ui_for_wpf
VulnCheckVersion data not supplied

Telerik UI for WinForms

Browse Progress Software / Telerik UI for WinForms

Default status: unaffected

CVE List2014.3.1021 to < 2024.3.924affected

ui_for_winforms

Browse telerik / ui_for_winforms

Default status: unknown

CVE List2014.3.1021 to < 2024.3.924affected

References

2