HTML Injection Vulnerability in Devolutions Server by Devolutions
CVE-2022-2316

5.4MEDIUM

Key Information:

Vendor

Devolutions

Status
Devolutions Server
Vendor
CVE Published:
6 July 2022

What is CVE-2022-2316?

An HTML injection vulnerability exists in secure messages of Devolutions Server versions before 2022.2. This vulnerability allows attackers to manipulate the page rendering, potentially redirecting users to malicious sites. By exploiting this flaw, unauthorized entities can compromise the integrity of secure messages, leading to misinformation or further attacks on users.

Affected Version(s)

Devolutions Server 2022.2

References

https://devolutions.net/security/advisories/DEVO-2022-0006
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.