CVE-2025-11958 | THREATINT

Description

An improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server 2025.2.15.0 and earlier allows an authenticated user to cause a denial of service to the Security Dashboard via a crafted request.

PUBLISHED Reserved 2025-10-20 | Published 2025-10-22 | Updated 2025-11-27 | Assigner DEVOLUTIONS

MEDIUM: 5.1CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Problem types

CWE-20: Improper Input Validation

Product status

Default status

unaffected

Any version

affected

Credits

bhatta_jeewan finder

References

devolutions.net/security/advisories/DEVO-2025-0015/

cve.org (CVE-2025-11958)

nvd.nist.gov (CVE-2025-11958)

Download JSON