7.8
CVSSv3

CVE-2024-12251

CVSSv4: NA | CVSSv3: 7.8 | CVSSv2: NA | VMScore: 880 | EPSS: 0.00024 | KEV: Not Included
Published: 12/02/2025 Updated: 12/02/2025

Vulnerability Summary

Command Injection Vulnerability in Telerik UI for WinUI Prior to 2025 Q1

In Progress® Telerik® UI for WinUI versions before 2025 Q1 (3.0.0), a command injection attack is possible through improper neutralization of hyperlink elements.

Vulnerable Product Search on Vulmon Subscribe to Product

progress software telerik ui for winui