Medium severity5.9NVD Advisory· Published Jul 30, 2025· Updated Jun 17, 2026
CVE-2025-8353
CVE-2025-8353
Description
UI synchronization issue in the Just-in-Time (JIT) access request approval interface in Devolutions Server 2025.2.4.0 and earlier allows a remote authenticated attacker to gain unauthorized access to deleted JIT Groups via stale UI state during standard checkout request processing.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*range: <2025.2.5.0
- (no CPE)range: <=2025.2.4.0
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
1- devolutions.net/security/advisories/DEVO-2025-0013/nvdVendor Advisory
News mentions
0No linked articles in our index yet.