Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-29c7-cgjr-6jrv

Опубликовано: 13 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

Improper access control in web extension restriction feature in Devolutions Server 2024.3.13 and earlier allows an authenticated user to bypass the browser extension restriction feature.

Improper access control in web extension restriction feature in Devolutions Server 2024.3.13 and earlier allows an authenticated user to bypass the browser extension restriction feature.

EPSS

Процентиль: 28%
0.00099
Низкий

8.1 High

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 8.1
nvd
11 месяцев назад

Improper access control in web extension restriction feature in Devolutions Server 2024.3.4.0 and earlier allows an authenticated user to bypass the browser extension restriction feature.

EPSS

Процентиль: 28%
0.00099
Низкий

8.1 High

CVSS3

Дефекты

CWE-284