CVE-2025-2280

Publication date

2025-03-13 13:02:47

Family

DEVOLUTIONS

State

PUBLISHED

Description

Improper access control in web extension restriction feature in Devolutions Server 2024.3.4.0 and earlier allows an authenticated user to bypass the browser extension restriction feature.