XSS Vulnerability in Devolutions Remote Desktop Manager for Windows
CVE-2024-0589

5.4MEDIUM

Key Information:

Vendor

Devolutions

Status
Remote Desktop Manager
Vendor
CVE Published:
31 January 2024

What is CVE-2024-0589?

A cross-site scripting vulnerability exists in Devolutions Remote Desktop Manager 2023.3.36 and earlier for Windows. This flaw allows an attacker with access to a particular data source to inject a malicious script through specially crafted input in the entry overview tab, potentially compromising user data and application integrity.

Affected Version(s)

Remote Desktop Manager Windows 0 <= 2023.3.36

References

https://devolutions.net/security/advisories/DEVO-2024-0001/

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.