description: Information leak in Content-Security-Policy header in Devolutions Server 2023.3.7.0 allows an unauthenticated attacker to list the configured Devolutions Gateways endpoints.
affected:
{
defaultStatus: unaffected
modules: [Devolutions Gateway, Content-Security-Policy]
product: Server
vendor: Devolutions
versions:
lessThanOrEqual: 2023.3.7, status: affected, version: 0, versionType: custom
}