Improper access controls on some API endpoints in Devolutions Server 2022.3.12 and earlier could allow a standard privileged user to perform privileged actions.

Related CVEs

CVE-2023-0951

Key Information

GHSA ID

GHSA-j86m-v8g6-8h75

Published

March 1, 2023 9:30 AM

Last Modified

March 10, 2023 3:30 PM

CVSS Score

7.5 /10

Primary Ecosystem

Unknown

Primary Package

Unknown

GitHub Reviewed

✗ No

Dataset

Last updated: July 6, 2025 6:30 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.