Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rr9j-62f6-whm3

Опубликовано: 22 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 7.1
CVSS3: 7.7

Описание

Improper access control in secure message component in Devolutions Server allows an authenticated user to steal unauthorized entries via the secure message entry attachment feature

This issue affects the following versions :

  • Devolutions Server 2025.2.2.0 through 2025.2.4.0

Devolutions Server 2025.1.11.0 and earlier

Improper access control in secure message component in Devolutions Server allows an authenticated user to steal unauthorized entries via the secure message entry attachment feature

This issue affects the following versions :

  • Devolutions Server 2025.2.2.0 through 2025.2.4.0

Devolutions Server 2025.1.11.0 and earlier

EPSS

Процентиль: 12%
0.0004
Низкий

7.1 High

CVSS4

7.7 High

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 7.7
nvd
7 месяцев назад

Improper access control in secure message component in Devolutions Server allows an authenticated user to steal unauthorized entries via the secure message entry attachment feature This issue affects the following versions : * Devolutions Server 2025.2.2.0 through 2025.2.4.0 * Devolutions Server 2025.1.11.0 and earlier

EPSS

Процентиль: 12%
0.0004
Низкий

7.1 High

CVSS4

7.7 High

CVSS3

Дефекты

CWE-284