Novnc ≫ Novnc

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

6.1

CVE-2017-18635

Exploit

EPSS 7.25%
Published 25.09.2019 23:15:09
Last modified 21.11.2024 03:20:32

An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.