CVE-2022-2316

2022-07-0618:56:20

DEVOLUTIONS

www.cve.org

html injection

devolutions server

secure messages

cve-2022-2316

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

HTML injection vulnerability in secure messages of Devolutions Server before 2022.2 allows attackers to alter the rendering of the page or redirect a user to another site.

CNA Affected

[
  {
    "product": "Devolutions Server",
    "vendor": "Devolutions",
    "versions": [
      {
        "lessThan": "2022.2",
        "status": "affected",
        "version": "2022.2",
        "versionType": "custom"
      }
    ]
  }
]

References

devolutions.net/security/advisories/DEVO-2022-0006