Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-0589 EUVD-2024-16382GHSA-xh95-48w4-456m

Cross-site scripting (XSS) vulnerability in the entry overview tab in Devolutions Remote Desktop Manager 2023.3.36 and earlier on Windows a…

Published Jan 31, 2024 · Updated Jun 9, 2025 · Assigned by DEVOLUTIONS

Description

Cross-site scripting (XSS) vulnerability in the entry overview tab in Devolutions Remote Desktop Manager 2023.3.36 and earlier on Windows allows an attacker with access to a data source to inject a malicious script via a specially crafted input in an entry.

Affected products

VendorProductAffectedFixed
Devolutions Remote Desktop Manager ≤ 2023.3.36 —

References