| Package | Affected versions | Patched versions |
|---|---|---|
| devolutions server | < 2025.1.9.0 | 2025.1.9.0 |
Improper access control in user group management in Devolutions Server 2025.1.7.0 and earlier allows a non-administrative user with both "User Management" and "User Group Management" permissions to perform privilege escalation by adding users to groups with administrative privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free