Portal
Forum
Devolutions Force
Devolutions Hub Business
Devolutions Hub Personal
Devolutions Send
Devolutions Academy
RDM
Workspace
Launcher
Security & Compliance
DEVO-2021-0001
Zusammenfassung
A Cross-Site Scripting (XSS) vulnerability was fixed in Remote Desktop Manager.
Betroffene Produkte
Remote Desktop Manager 2020.2 and earlier
Änderungsprotokoll
Initial publication - 2021-03-30
Schweregrad
Medium
Produkt
Remote Desktop Manager
Behobene Version
2020.3
Cross-site scripting (XSS) vulnerability in webviews (CVE-2021-23922)
Beschreibung
A cross-site scripting (XSS) vulnerability in the application could allow an actor to inject malicious javascript code in some form fields that are rendered by webviews.
Behebungen und Workarounds
Install Remote Desktop Manager 2020.3 or more recent.
Schweregrad
Medium - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Betroffene Produkte
Remote Desktop Manager 2020.2 and earlier
CVE(s)
CVE-2021-23922
