Skip to content
OpenAdvisories
High · 8.8 CVE-2023-0953 EUVD-2023-12938GHSA-m2v4-vxvf-w4v4

Insufficient input sanitization in the documentation feature of Devolutions Server 2022.3.12 and earlier allows an authenticated attacker t…

Published Feb 22, 2023 · Updated Mar 12, 2025 · Assigned by DEVOLUTIONS

Description

Insufficient input sanitization in the documentation feature of Devolutions Server 2022.3.12 and earlier allows an authenticated attacker to perform an SQL Injection, potentially resulting in unauthorized access to system resources.

Affected products

VendorProductAffectedFixed
Devolutions Devolutions Server ≤ 2022.3.12 —

References