Sécurité et conformité

Avis Signaler un problème de sécurité Centre de confiance

DEVO-2021-0003

Résumé

A cross-site scripting (XSS) vulnerability was fixed in Remote Desktop Manager.

Produits affectés

Remote Desktop Manager 2020.3 and earlier

Journal des modifications

Initial publication - 2021-03-30

Sévérité

Medium

Produit

Remote Desktop Manager

Version corrigée

2021.1

Cross-site scripting (XSS) in administration reports (CVE-2021-28047)

Description

A cross-site scripting (XSS) vulnerability in the application could allow an actor to inject malicious javascript code in some form fields that are rendered in administration reports.

Mesures correctives et solutions de contournement

Install Remote Desktop Manager 2021.1 or more recent.

Sévérité

Medium - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Produits affectés

Remote Desktop Manager 2020.3 and earlier

CVE(s)

CVE-2021-28047