In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1213), a code execution attack is possible through an insecure deserialization vulnerability.
Metrics
Affected Vendors & Products
References
History
Wed, 18 Dec 2024 13:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Telerik
Telerik ui For Wpf |
|
CPEs | cpe:2.3:a:telerik:ui_for_wpf:*:*:*:*:*:*:*:* | |
Vendors & Products |
Telerik
Telerik ui For Wpf |
Mon, 16 Dec 2024 18:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Mon, 16 Dec 2024 17:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1213), a code execution attack is possible through an insecure deserialization vulnerability. | |
Title | Progress UI for WPF format provider unsafe deserialization vulnerability | |
Weaknesses | CWE-502 | |
References |
| |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: ProgressSoftware
Published: 2024-12-16T16:59:25.572Z
Updated: 2024-12-16T17:26:03.808Z
Reserved: 2024-10-17T16:27:33.734Z
Link: CVE-2024-10095
Vulnrichment
Updated: 2024-12-16T17:25:59.414Z
NVD
Status : Analyzed
Published: 2024-12-16T17:15:06.757
Modified: 2024-12-18T12:59:51.003
Link: CVE-2024-10095
Redhat
No data.