Information disclosure

2023-11-2219:15:00

PRIOn knowledge base

www.prio-n.com

information disclosure

content-security-policy

devolutions server

unauthenticated attacker

gateways endpoints

nvd

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.5%

JSON

Information leak in Content-Security-Policy header in Devolutions Server 2023.3.7.0 allows an unauthenticated attacker to list the configured Devolutions Gateways endpoints.

CPENameOperatorVersion
devolutions_serverlt2023.3.8.0

CPE	Name	Operator	Version
	devolutions_server	lt	2023.3.8.0

References

devolutions.net/security/advisories/DEVO-2023-0020/