CVE-2023-6264: Devolutions Server

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Information leak in Content-Security-Policy header in Devolutions Server 2023.3.7.0 allows an unauthenticated attacker to list the configured Devolutions Gateways endpoints.

Affected products

• Devolutions Devolutions Server: before 2023.3.8.0 (fixed in 2023.3.8.0)

Published 2023-11-22. Last modified 2026-06-17.