Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-29c7-cgjr-6jrv

Опубликовано: 13 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

Improper access control in web extension restriction feature in Devolutions Server 2024.3.13 and earlier allows an authenticated user to bypass the browser extension restriction feature.

Improper access control in web extension restriction feature in Devolutions Server 2024.3.13 and earlier allows an authenticated user to bypass the browser extension restriction feature.

EPSS

Процентиль: 12%
0.00042
Низкий

8.1 High

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 8.1
nvd
5 месяцев назад

Improper access control in web extension restriction feature in Devolutions Server 2024.3.4.0 and earlier allows an authenticated user to bypass the browser extension restriction feature.

EPSS

Процентиль: 12%
0.00042
Низкий

8.1 High

CVSS3

Дефекты

CWE-284