CVE-2025-8353 Information

Jul 31, 2025 cve

Description

UI synchronization issue in the Just-in-Time (JIT) access request approval interface in Devolutions Server 2025.2.4.0 and earlier allows a remote authenticated attacker to gain unauthorized access to deleted JIT Groups via stale UI state during standard checkout request processing.

Reference

https://devolutions.net/security/advisories/DEVO-2025-0013/

CNNVD-202507-3793 (Published: 2025-07-30)

Share on: