CVE-2022-2316

MEDIUM 5.4CVE-2022-2316 · Published 06/07/2022 · updated 17/06/2026

In short

CVE-2022-2316 is a MEDIUM (CVSS 5.4) vulnerability affecting devolutions server (devolutions).
Chance of exploitation in the next 30 days (EPSS): 0.56%, higher than 46.6% of all vulnerabilities.
Fix: update to 2022.2 or later.

Package	Affected versions	Patched versions
devolutions server devolutions	`< 2022.2`	`2022.2`

Description

HTML injection vulnerability in secure messages of Devolutions Server before 2022.2 allows attackers to alter the rendering of the page or redirect a user to another site.

References

devolutions.net/security/advisories/DEVO-2022-0006 · Vendor Advisory

More vulnerabilities in devolutions server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

devolutions server

devolutions

< 2022.2

2022.2

More vulnerabilities in devolutions server

See all →