Skip to content
OpenAdvisories
Unscored CVE-2023-6264 EUVD-2023-58509GHSA-6cq5-2xh4-wh8x

Information leak in Content-Security-Policy header in Devolutions Server 2023.3.7.0 allows an unauthenticated attacker to list the configur…

Published Nov 22, 2023 · Updated Aug 2, 2024 · Assigned by DEVOLUTIONS

Vendor: Devolutions Product: Server

Description

Information leak in Content-Security-Policy header in Devolutions Server 2023.3.7.0 allows an unauthenticated attacker to list the configured Devolutions Gateways endpoints.

Affected products

VendorProductAffectedFixed
Devolutions Server ≤ 2023.3.7 —

References