CVE-2024-10013
In Progress Telerik UI for WinForms versions prior to 2024 Q4 (2024.4.1113), a code execution attack is possible through an insecure deserialization vulnerability.
- Score
- CVSS 3.1 7.8 High
- Status
- Analyzed - security@progress.com
- Published
- 2024-11-13
- Last modified
- 2024-11-13
- Weaknesses
- CWE-502
Affected products
- Telerik Ui For Winforms (Progress)
- Progress Telerik Ui For Wpf Versions (Progress Software)
- Telerik Ui For Winforms (Progress Software)
References
- https://docs.telerik.com/devtools/winforms/knowledge-base/unsafe-deserialization-cve-2024-10013
