Description
An overly permissive CORS policy in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows a remote attacker to leak cross-origin data via a crafted HTML page.
Unscored
CVE-2021-28048
EUVD-2021-14755GHSA-hcjf-gxg6-hwvr
An overly permissive CORS policy in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows a remote attacker t…
Published Apr 14, 2021 · Updated Aug 3, 2024 · Assigned by mitre