Threats tagged 'ghsa-vvxh-xmcw-q95q'

A prototype pollution vulnerability exists in the Scheduler component of Progress Software Kendo UI for Angular versions prior to 25.1.0. This flaw allows a high-privileged attacker who can control a field path processed by the Scheduler to modify the prototype of built-in objects. The impact on confidentiality, integrity, and availability is limited. The vulnerability has a medium severity rating with a CVSS score of 4.1.