What is GHSA-4377-v882-5xvg?

GHSA-4377-v882-5xvg is a security advisory published by GitHub Security Advisories with unknown severity. Cleartext transmission of sensitive information in the email configuration test in Devolutions...

Which CVE IDs does GHSA-4377-v882-5xvg cover?

GHSA-4377-v882-5xvg covers the following CVE IDs: CVE-2026-120734. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-4377-v882-5xvgunknown

Cleartext transmission of sensitive information in the email configuration test in Devolutions...

Vendor

GitHub Security Advisories

Published

November 3, 2026

Last Modified

November 3, 2026

🔗 CVE IDs covered (1)

CVE-2026-120734 →

📋 Description

Cleartext transmission of sensitive information in the email configuration test in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with access to the test action to obtain the stored SMTP password via a request that names an attacker-controlled SMTP host.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-120734
https://devolutions.net/security/advisories/DEVO-2026-0039
https://github.com/advisories/GHSA-4377-v882-5xvg