CVE-2025-6741

Description

Improper access control in secure message component in Devolutions Server allows an authenticated user to steal unauthorized entries via the secure message entry attachment feature This issue affects the following versions : * Devolutions Server 2025.2.2.0 through 2025.2.4.0 * Devolutions Server 2025.1.11.0 and earlier

References

https://devolutions.net/security/advisories/DEVO-2025-0012/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS