← Back

Thinfinity Vnc

thinfinity_vnc

Vendor: Cybelesoft • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-25227
1Cybelesoft
1Thinfinity Vnc
Nov 21, 2024
May 20, 2022
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Thinfinity VNC v4.0.0.1 contains a Cross-Origin Resource Sharing (CORS) vulnerability which can allow an unprivileged remote attacker, if they can trick a user into browse malicious site, to obtain an 'ID' that can be us...Show more
Thinfinity VNC v4.0.0.1 contains a Cross-Origin Resource Sharing (CORS) vulnerability which can allow an unprivileged remote attacker, if they can trick a user into browse malicious site, to obtain an 'ID' that can be used to send websocket requests and achieve RCE.Show less