Unrated severityNVD Advisory· Published Apr 14, 2021· Updated Aug 3, 2024
CVE-2021-28048
CVE-2021-28048
Description
An overly permissive CORS policy in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows a remote attacker to leak cross-origin data via a crafted HTML page.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Devolutions/Devolutions Serverdescription
- Range: <2021.1
Patches
Vulnerability mechanics
References
1- devolutions.net/security/advisories/DEVO-2021-0004mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.