CVE-2025-2280

Summary

Improper access control in web extension restriction feature in Devolutions Server 2024.3.4.0

and earlier allows an authenticated user to bypass the browser extension restriction feature.

Affected Software

Weaknesses

• CWE-284: CWE-284: Improper Access Control

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://devolutions.net/security/advisories/DEVO-2025-0004/

• ←Previous
• Next→