Security & Compliance

Warnungen Ein sicherheitsproblem melden warnungen Trust Center

DEVO-2021-0001

Zusammenfassung

A Cross-Site Scripting (XSS) vulnerability was fixed in Remote Desktop Manager.

Betroffene Produkte

Remote Desktop Manager 2020.2 and earlier

Änderungsprotokoll

Initial publication - 2021-03-30

Schweregrad

Medium

Produkt

Remote Desktop Manager

Behobene Version

2020.3

Cross-site scripting (XSS) vulnerability in webviews (CVE-2021-23922)

Beschreibung

A cross-site scripting (XSS) vulnerability in the application could allow an actor to inject malicious javascript code in some form fields that are rendered by webviews.

Behebungen und Workarounds

Install Remote Desktop Manager 2020.3 or more recent.

Schweregrad

Medium - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Betroffene Produkte

Remote Desktop Manager 2020.2 and earlier

CVE(s)

CVE-2021-23922