Threats tagged 'ghsa-mcrv-gh25-252c'

In Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421 contain a vulnerability in the RadFilter control related to insecure deserialization of filter state when exposed to the client. An attacker who tampers with this state can potentially achieve server-side remote code execution. The vulnerability has a high severity score of 8.1 but no known exploits in the wild have been reported. No patch information is currently available.