1. Home
  2. CVE Database
  3. CVE-2024-11628
MEDIUM · 4.1

CVE-2024-11628

In Progress® Telerik® Kendo UI for Vue versions v2.4.0 through v6.0.1, an attacker can introduce or modify properties within the global prototype chain which can result in denial of service or command...

Vulnerability Description

In Progress® Telerik® Kendo UI for Vue versions v2.4.0 through v6.0.1, an attacker can introduce or modify properties within the global prototype chain which can result in denial of service or command injection.

CVSS Score

4.1

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
ProgressKendo Ui For Vue>= 2.4.0, < 6.1.0

Related Weaknesses (CWE)

CWE-1321

References

FAQ

What is CVE-2024-11628?

CVE-2024-11628 is a vulnerability with a CVSS score of 4.1 (MEDIUM). In Progress® Telerik® Kendo UI for Vue versions v2.4.0 through v6.0.1, an attacker can introduce or modify properties within the global prototype chain which can result in denial of service or command...

How severe is CVE-2024-11628?

CVE-2024-11628 has been rated MEDIUM with a CVSS base score of 4.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-11628?

Check the references section above for vendor advisories and patch information. Affected products include: Progress Kendo Ui For Vue.